From 3bd47b525d7bd8230cef007d9d2836b8d9224613 Mon Sep 17 00:00:00 2001 From: SDKAuto Date: Fri, 19 Apr 2024 20:55:52 +0000 Subject: [PATCH] CodeGen from PR 28760 in Azure/azure-rest-api-specs Merge 9cd7ff5d53f60f40ae1c934386d9865d7c4ca28c into 583dff51c95078ebbdfef3ee0a10f1b3c93bff68 --- .../Microsoft.Network.NRP.json | 4489 --- schemas/2015-06-15/Microsoft.Network.NRP.json | 5367 ---- schemas/2016-03-30/Microsoft.Network.NRP.json | 5461 ---- schemas/2016-06-01/Microsoft.Network.NRP.json | 5551 ---- schemas/2016-09-01/Microsoft.Network.NRP.json | 5867 ---- schemas/2016-12-01/Microsoft.Network.NRP.json | 6229 ---- schemas/2017-03-01/Microsoft.Network.NRP.json | 6531 ---- schemas/2017-03-30/Microsoft.Network.NRP.json | 6531 ---- schemas/2017-06-01/Microsoft.Network.NRP.json | 7261 ----- schemas/2017-08-01/Microsoft.Network.NRP.json | 7346 ----- schemas/2017-09-01/Microsoft.Network.NRP.json | 7531 ----- schemas/2017-10-01/Microsoft.Network.NRP.json | 7777 ----- schemas/2017-11-01/Microsoft.Network.NRP.json | 7782 ----- schemas/2018-01-01/Microsoft.Network.NRP.json | 7806 ----- schemas/2018-02-01/Microsoft.Network.NRP.json | 8436 ----- schemas/2018-04-01/Microsoft.Network.NRP.json | 9935 ------ .../subscriptionDeploymentTemplate.json | 42 - schemas/2018-06-01/Microsoft.Network.NRP.json | 9935 ------ schemas/2018-07-01/Microsoft.Network.NRP.json | 10561 ------ schemas/2018-08-01/Microsoft.Network.NRP.json | 12982 -------- schemas/2018-10-01/Microsoft.Network.NRP.json | 13196 -------- schemas/2018-11-01/Microsoft.Network.NRP.json | 13380 -------- schemas/2018-12-01/Microsoft.Network.NRP.json | 13817 -------- schemas/2019-02-01/Microsoft.Network.NRP.json | 13803 -------- schemas/2019-04-01/Microsoft.Network.NRP.json | 14606 --------- schemas/2019-06-01/Microsoft.Network.NRP.json | 15449 --------- schemas/2019-07-01/Microsoft.Network.NRP.json | 15673 --------- schemas/2019-08-01/Microsoft.Network.NRP.json | 15883 --------- .../managementGroupDeploymentTemplate.json | 39 - .../2019-08-01/tenantDeploymentTemplate.json | 3 - schemas/2019-09-01/Microsoft.Network.NRP.json | 15360 --------- schemas/2019-11-01/Microsoft.Network.NRP.json | 16241 ---------- schemas/2019-12-01/Microsoft.Network.NRP.json | 16616 ---------- schemas/2020-03-01/Microsoft.Network.NRP.json | 17156 ---------- schemas/2020-04-01/Microsoft.Network.NRP.json | 17681 ---------- schemas/2020-05-01/Microsoft.Network.NRP.json | 18595 ----------- schemas/2020-06-01/Microsoft.Network.NRP.json | 19428 ----------- schemas/2020-07-01/Microsoft.Network.NRP.json | 20208 ------------ schemas/2020-08-01/Microsoft.Network.NRP.json | 20594 ------------ schemas/2020-11-01/Microsoft.Network.NRP.json | 20767 ------------ .../Microsoft.Network.NRP.json | 1814 -- schemas/2021-02-01/Microsoft.Network.NRP.json | 21321 ------------ .../Microsoft.Network.NRP.json | 86 - schemas/2021-03-01/Microsoft.Network.NRP.json | 21941 ------------- .../Microsoft.Network.NRP.json | 1373 - schemas/2021-05-01/Microsoft.Network.NRP.json | 22341 ------------- schemas/2021-08-01/Microsoft.Network.NRP.json | 23129 ------------- schemas/2022-01-01/Microsoft.Network.NRP.json | 24362 -------------- .../Microsoft.Network.NRP.json | 1375 - .../Microsoft.Network.NRP.json | 1375 - schemas/2022-05-01/Microsoft.Network.NRP.json | 25129 --------------- schemas/2022-07-01/Microsoft.Network.NRP.json | 25187 --------------- schemas/2022-09-01/Microsoft.Network.NRP.json | 25211 --------------- schemas/2022-11-01/Microsoft.Network.NRP.json | 25551 --------------- schemas/2023-02-01/Microsoft.Network.NRP.json | 25565 --------------- .../Microsoft.Network.NRP.json | 439 - schemas/2023-04-01/Microsoft.Network.NRP.json | 25582 --------------- schemas/2023-05-01/Microsoft.Network.NRP.json | 25698 --------------- schemas/2023-06-01/Microsoft.Network.NRP.json | 25935 --------------- .../Microsoft.Network.NRP.json | 753 - .../Microsoft.Network.NRP.json | 767 - schemas/2023-09-01/Microsoft.Network.NRP.json | 25951 --------------- schemas/2023-11-01/Microsoft.Network.NRP.json | 26828 ---------------- schemas/common/autogeneratedResources.json | 8643 ----- 64 files changed, 828271 deletions(-) delete mode 100644 schemas/2015-05-01-preview/Microsoft.Network.NRP.json delete mode 100644 schemas/2015-06-15/Microsoft.Network.NRP.json delete mode 100644 schemas/2016-03-30/Microsoft.Network.NRP.json delete mode 100644 schemas/2016-06-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2016-09-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2016-12-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2017-03-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2017-03-30/Microsoft.Network.NRP.json delete mode 100644 schemas/2017-06-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2017-08-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2017-09-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2017-10-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2017-11-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2018-01-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2018-02-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2018-04-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2018-06-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2018-07-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2018-08-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2018-10-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2018-11-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2018-12-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2019-02-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2019-04-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2019-06-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2019-07-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2019-08-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2019-09-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2019-11-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2019-12-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2020-03-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2020-04-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2020-05-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2020-06-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2020-07-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2020-08-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2020-11-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2021-02-01-preview/Microsoft.Network.NRP.json delete mode 100644 schemas/2021-02-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2021-03-01-preview/Microsoft.Network.NRP.json delete mode 100644 schemas/2021-03-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2021-05-01-preview/Microsoft.Network.NRP.json delete mode 100644 schemas/2021-05-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2021-08-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2022-01-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2022-02-01-preview/Microsoft.Network.NRP.json delete mode 100644 schemas/2022-04-01-preview/Microsoft.Network.NRP.json delete mode 100644 schemas/2022-05-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2022-07-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2022-09-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2022-11-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2023-02-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2023-03-01-preview/Microsoft.Network.NRP.json delete mode 100644 schemas/2023-04-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2023-05-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2023-06-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2023-07-01-preview/Microsoft.Network.NRP.json delete mode 100644 schemas/2023-08-01-preview/Microsoft.Network.NRP.json delete mode 100644 schemas/2023-09-01/Microsoft.Network.NRP.json delete mode 100644 schemas/2023-11-01/Microsoft.Network.NRP.json diff --git a/schemas/2015-05-01-preview/Microsoft.Network.NRP.json b/schemas/2015-05-01-preview/Microsoft.Network.NRP.json deleted file mode 100644 index d800d8fc90..0000000000 --- a/schemas/2015-05-01-preview/Microsoft.Network.NRP.json +++ /dev/null @@ -1,4489 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the ApplicationGateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Application Gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGatewayConnection properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "Gets or sets sku", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the loadBalancer.", - "type": "string" - }, - "properties": { - "description": "Properties of Load Balancer", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "NetworkInterface properties. ", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the publicIpAddress.", - "type": "string" - }, - "properties": { - "description": "PublicIpAddress properties", - "oneOf": [ - { - "$ref": "#/definitions/PublicIpAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualnetworkgateways": { - "description": "Microsoft.Network/virtualnetworkgateways", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualnetworkgateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualnetworks": { - "description": "Microsoft.Network/virtualnetworks", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualnetworks_subnets_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualnetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualnetworks_subnets": { - "description": "Microsoft.Network/virtualnetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualnetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets", - "properties": { - "addressPrefixes": { - "description": "Gets or sets List of address blocks reserved for this virtual network in CIDR notation", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend Address of application gateway", - "properties": { - "fqdn": { - "description": "Gets or sets the dns name", - "type": "string" - }, - "ipAddress": { - "description": "Gets or sets the ip address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of application gateway", - "properties": { - "backendAddresses": { - "description": "Gets or sets the backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Gets or sets backendIPConfiguration of application gateway ", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the backend address pool resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of application gateway", - "properties": { - "cookieBasedAffinity": { - "description": "Gets or sets the cookie affinity", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Gets or sets the port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the protocol", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the backend http settings resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of application gateway", - "properties": { - "privateIPAddress": { - "description": "Gets or sets the privateIPAddress of the Network Interface IP Configuration", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Gets or sets the reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend Port of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend Port of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend Port of application gateway", - "properties": { - "port": { - "description": "Gets or sets the frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the frontend port resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Http listener of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of Http listener of application gateway", - "properties": { - "frontendIPConfiguration": { - "description": "Gets or sets frontend IP configuration resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Gets or sets frontend port resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the protocol", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the http listener resource Updating/Deleting/Failed", - "type": "string" - }, - "sslCertificate": { - "description": "Gets or sets ssl certificate resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of application gateway", - "properties": { - "provisioningState": { - "description": "Gets or sets Provisioning state of the application gateway subnet resource Updating/Deleting/Failed", - "type": "string" - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource.A subnet from where application gateway gets its private address ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of Application Gateway", - "properties": { - "backendAddressPools": { - "description": "Gets or sets backend address pool of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Gets or sets backend http settings of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Gets or sets frontend IP addresses of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Gets or sets frontend ports of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Gets or sets subnets of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Gets or sets HTTP listeners of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the ApplicationGateway resource Updating/Deleting/Failed", - "type": "string" - }, - "requestRoutingRules": { - "description": "Gets or sets request routing rules of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the ApplicationGateway resource", - "type": "string" - }, - "sku": { - "description": "Gets or sets sku of application gateway resource", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "Gets or sets ssl certificates of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Request routing rule of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of Request routing rule of application gateway", - "properties": { - "backendAddressPool": { - "description": "Gets or sets backend address pool resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Gets or sets frontend port resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Gets or sets http listener resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the request routing rule resource Updating/Deleting/Failed", - "type": "string" - }, - "ruleType": { - "description": "Gets or sets the rule type", - "oneOf": [ - { - "enum": [ - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of application gateway", - "properties": { - "capacity": { - "description": "Gets or sets capacity (instance count) of application gateway", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gets or sets name of application gateway SKU", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gets or sets tier of application gateway", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "data": { - "description": "Gets or sets the certificate data ", - "type": "string" - }, - "password": { - "description": "Gets or sets the certificate password ", - "type": "string" - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the ssl certificate resource Updating/Deleting/Failed", - "type": "string" - }, - "publicCertData": { - "description": "Gets or sets the certificate public data ", - "type": "string" - } - }, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "Gets or sets the authorization key", - "type": "string" - }, - "authorizationUseStatus": { - "description": "Gets or sets AuthorizationUseStatus", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of BackendAddressPool", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of BackendAddressPool", - "properties": { - "backendIPConfigurations": { - "description": "Gets collection of references to IPs defined in NICs", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Gets Load Balancing rules that use this Backend Address Pool", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRule": { - "description": "Gets outbound rules that use this Backend Address Pool", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DHCPOptions contains an array of DNS servers available to VMs deployed in the virtual networkStandard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "Gets or sets list of DNS servers IP addresses", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in a ExpressRouteCircuit resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in a ExpressRouteCircuit resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering config", - "properties": { - "advertisedPublicPrefixes": { - "description": "Gets or sets the reference of AdvertisedPublicPrefixes", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "Gets or sets AdvertisedPublicPrefixState of the Peering resource ", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "Gets or Sets CustomerAsn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "Gets or Sets RoutingRegistryName of the config.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "Gets or sets the azure ASN", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "Gets or sets the Microsoft peering config", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "Gets or sets the peer ASN", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "Gets or sets PeeringType", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "Gets or sets the primary port", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "Gets or sets the primary address prefix", - "type": "string" - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "secondaryAzurePort": { - "description": "Gets or sets the secondary port", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "Gets or sets the secondary address prefix", - "type": "string" - }, - "sharedKey": { - "description": "Gets or sets the shared key", - "type": "string" - }, - "state": { - "description": "Gets or sets state of Peering", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets or peering stats", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "Gets or sets the vlan id", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit", - "properties": { - "authorizations": { - "description": "Gets or sets list of authorizations", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "Gets or sets CircuitProvisioningState state of the resource ", - "type": "string" - }, - "peerings": { - "description": "Gets or sets list of peerings", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "serviceKey": { - "description": "Gets or sets ServiceKey", - "type": "string" - }, - "serviceProviderNotes": { - "description": "Gets or sets ServiceProviderNotes", - "type": "string" - }, - "serviceProviderProperties": { - "description": "Gets or sets ServiceProviderProperties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "Gets or sets ServiceProviderProvisioningState state of the resource ", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit", - "properties": { - "bandwidthInMbps": { - "description": "Gets or sets BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "Gets or sets peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "Gets or sets serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains sku in an ExpressRouteCircuit", - "properties": { - "family": { - "description": "Gets or sets family of the sku.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gets or sets name of the sku.", - "type": "string" - }, - "tier": { - "description": "Gets or sets tier of the sku.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains Stats associated with the peering", - "properties": { - "bytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIpConfiguration": { - "description": "Frontend IP address of the load balancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP Configuration of the load balancer", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIpConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer", - "properties": { - "inboundNatPools": { - "description": "Read only.Inbound pools URIs that use this frontend IP", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Read only.Inbound rules URIs that use this frontend IP", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Gets Load Balancing rules URIs that use this frontend IP", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "Read only.Outbound rules URIs that use this frontend IP", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Gets or sets the IP address of the Load Balancer.This is only specified if a specific private IP address shall be allocated from the subnet specified in subnetRef", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Gets or sets the reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource.A subnet from where the load balancer gets its private frontend address ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the loadbalancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT pool", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool", - "properties": { - "backendPort": { - "description": "Gets or sets a port used for internal connections on the endpoint. The localPort attribute maps the eternal port of the endpoint to an internal port on a role. This is useful in scenarios where a role must communicate to an internal component on a port that is different from the one that is exposed externally. If not specified, the value of localPort is the same as the port attribute. Set the value of localPort to '*' to automatically assign an unallocated port that is discoverable using the runtime API", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Gets or sets a reference to frontend IP Addresses", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "Gets or sets the ending port range for the NAT pool. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "Gets or sets the starting port range for the NAT pool. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the transport protocol for the external endpoint. Possible values are Udp or Tcp", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the loadbalancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT rule", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of Inbound NAT rule", - "properties": { - "backendIPConfiguration": { - "description": "Gets or sets a reference to a private ip address defined on a NetworkInterface of a VM. Traffic sent to frontendPort of each of the frontendIPConfigurations is forwarded to the backed IP", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "Gets or sets a port used for internal connections on the endpoint. The localPort attribute maps the eternal port of the endpoint to an internal port on a role. This is useful in scenarios where a role must communicate to an internal component on a port that is different from the one that is exposed externally. If not specified, the value of localPort is the same as the port attribute. Set the value of localPort to '*' to automatically assign an unallocated port that is discoverable using the runtime API", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn availability Group. This setting is required when using the SQL Always ON availability Groups in SQL server. This setting can't be changed after you create the endpoint", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Gets or sets a reference to frontend IP Addresses", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Gets or sets the port for the external endpoint. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "Gets or sets the timeout for the Tcp idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to Tcp", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the transport protocol for the external endpoint. Possible values are Udp or Tcp", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort", - "enableFloatingIP" - ], - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of Load Balancer", - "properties": { - "backendAddressPools": { - "description": "Gets or sets Pools of backend IP addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Gets or sets frontend IP addresses of the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Gets or sets inbound NAT pools", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Gets or sets list of inbound rules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Gets or sets load balancing rules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "Gets or sets outbound NAT rules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Gets or sets list of Load balancer probes", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the Load balancer resource", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "Rules of the load balancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer", - "properties": { - "backendAddressPool": { - "description": "Gets or sets a reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "Gets or sets a port used for internal connections on the endpoint. The localPort attribute maps the eternal port of the endpoint to an internal port on a role. This is useful in scenarios where a role must communicate to an internal component on a port that is different from the one that is exposed externally. If not specified, the value of localPort is the same as the port attribute. Set the value of localPort to '*' to automatically assign an unallocated port that is discoverable using the runtime API", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn availability Group. This setting is required when using the SQL Always ON availability Groups in SQL server. This setting can't be changed after you create the endpoint", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Gets or sets a reference to frontend IP Addresses", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Gets or sets the port for the external endpoint. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "Gets or sets the timeout for the Tcp idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to Tcp", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "Gets or sets the load distribution policy for this rule", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Gets or sets the reference of the load balancer probe used by the Load Balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the transport protocol for the external endpoint. Possible values are Udp or Tcp", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "backendAddressPool", - "protocol", - "frontendPort", - "enableFloatingIP" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "location" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site Address space", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the LocalNetworkGateway resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the LocalNetworkGateway resource", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "Dns Settings of a network interface", - "properties": { - "appliedDnsServers": { - "description": "Gets or sets list of Applied DNS servers IP addresses", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "Gets or sets list of DNS servers IP addresses", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Gets or sets the Internal DNS name", - "type": "string" - }, - "internalFqdn": { - "description": "Gets or sets full IDNS name in the form, DnsName.VnetId.ZoneId.TopLevelSuffix. This is set when the NIC is associated to a VM", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIpConfiguration": { - "description": "IPConfiguration in a NetworkInterface", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of IPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of IPConfiguration", - "properties": { - "loadBalancerBackendAddressPools": { - "description": "Gets or sets the reference of LoadBalancerBackendAddressPool resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "Gets or sets list of references of LoadBalancerInboundNatRules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Gets or sets the privateIPAddress of the Network Interface IP Configuration", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Gets or sets the reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "Gets or sets DNS Settings in NetworkInterface", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Gets or sets whether IPForwarding is enabled on the NIC", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Gets or sets list of IPConfigurations of the NetworkInterface", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "Gets the MAC Address of the network interface", - "type": "string" - }, - "networkSecurityGroup": { - "description": "Gets or sets the reference of the NetworkSecurityGroup resource", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary NIC on a virtual machine", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the network interface resource", - "type": "string" - }, - "virtualMachine": { - "description": "Gets or sets the reference of a VirtualMachine", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource", - "properties": { - "defaultSecurityRules": { - "description": "Gets or sets Default security rules of network security group", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkInterfaces": { - "description": "Gets collection of references to Network Interfaces", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the network security group resource", - "type": "string" - }, - "securityRules": { - "description": "Gets or sets Security rules of network security group", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "Gets collection of references to subnets", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the loadbalancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Outbound NAT pool of the loadbalancer", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the loadbalancer", - "properties": { - "allocatedOutboundPorts": { - "description": "Gets or sets the number of outbound ports to be used for SNAT", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "Gets or sets a reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Gets or sets Frontend IP addresses of the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "allocatedOutboundPorts", - "backendAddressPool" - ], - "type": "object" - }, - "Probe": { - "description": "Load balancer Probe", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "properties": { - "intervalInSeconds": { - "description": "Gets or sets the interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Gets Load balancer rules that use this probe", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "Gets or sets the number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure. ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Gets or sets Port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the protocol of the end point. Possible values are http pr Tcp. If Tcp is specified, a received ACK is required for the probe to be successful. If http is specified,a 200 OK response from the specifies URI is required for the probe to be successful", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "requestPath": { - "description": "Gets or sets the URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIpAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIpAddressPropertiesFormat": { - "description": "PublicIpAddress properties", - "properties": { - "dnsSettings": { - "description": "Gets or sets FQDN of the DNS record associated with the public IP address", - "oneOf": [ - { - "$ref": "#/definitions/PublicIpAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "Gets or sets the idle timeout of the public IP address", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "Gets the assigned public IP address", - "type": "string" - }, - "ipConfiguration": { - "description": "Gets a reference to the network interface IP configurations using this public IP address", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAllocationMethod": { - "description": "Gets or sets PublicIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the PublicIP resource", - "type": "string" - } - }, - "required": [ - "publicIPAllocationMethod" - ], - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "Gets or sets the destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "Gets or sets the IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "Gets or sets the type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "Gets or sets Provisioning state of the resource Updating/Deleting/Failed", - "type": "string" - }, - "routes": { - "description": "Gets or sets Routes in a Route Table", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "Gets collection of references to subnets", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "properties": { - "access": { - "description": "Gets or sets network traffic is allowed or denied. Possible values are 'Allow' and 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "Gets or sets a description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "Gets or sets destination address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. ", - "type": "string" - }, - "destinationPortRange": { - "description": "Gets or sets Destination Port or Range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "direction": { - "description": "Gets or sets the direction of the rule.InBound or Outbound. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Gets or sets the priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets Network protocol this rule applies to. Can be Tcp, Udp or All(*).", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "Gets or sets source address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourcePortRange": { - "description": "Gets or sets Source Port or Range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - } - }, - "required": [ - "protocol", - "sourceAddressPrefix", - "destinationAddressPrefix", - "access", - "direction" - ], - "type": "object" - }, - "SubResource": { - "properties": { - "id": { - "description": "Resource Id", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a VirtualNetwork resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "Gets or sets Address prefix for the subnet.", - "type": "string" - }, - "ipConfigurations": { - "description": "Gets array of references to the network interface IP configurations using subnet", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "Gets or sets the reference of the NetworkSecurityGroup resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "routeTable": { - "description": "Gets or sets the reference of the RouteTable resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "addressPrefix" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "location" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "connectionStatus": { - "description": "Virtual network Gateway connection status", - "oneOf": [ - { - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type IPsec/Dedicated/VpnClient/Vnet2Vnet", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressBytesTransferred": { - "description": "The Egress Bytes Transferred in this connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressBytesTransferred": { - "description": "The Ingress Bytes Transferred in this connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the VirtualNetworkGatewayConnection resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the VirtualNetworkGatewayConnection resource", - "type": "string" - }, - "routingWeight": { - "description": "The Routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPsec share key.", - "type": "string" - }, - "virtualNetworkGateway1": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIpConfiguration": { - "description": "IpConfiguration for Virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIpConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAddress": { - "description": "Gets or sets the privateIPAddress of the Network Interface IP Configuration", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Gets or sets the reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "enableBgp": { - "description": "EnableBgp Flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "Gets or sets the reference of the LocalNetworkGateway resource which represents Local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IpConfigurations for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the VirtualNetworkGateway resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the VirtualNetworkGateway resource", - "type": "string" - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "properties": { - "addressSpace": { - "description": "Gets or sets AddressSpace that contains an array of IP address ranges that can be used by subnets", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "Gets or sets DHCPOptions that contains an array of DNS servers available to VMs deployed in the virtual network", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the VirtualNetwork resource", - "type": "string" - }, - "subnets": { - "description": "Gets or sets List of subnets in a VirtualNetwork", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualnetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualnetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2015-05-01-preview" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2015-06-15/Microsoft.Network.NRP.json b/schemas/2015-06-15/Microsoft.Network.NRP.json deleted file mode 100644 index f0c9332b7c..0000000000 --- a/schemas/2015-06-15/Microsoft.Network.NRP.json +++ /dev/null @@ -1,5367 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGatewayConnection properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "NetworkInterface properties. ", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualnetworks_subnets_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualnetworks_subnets": { - "description": "Microsoft.Network/virtualnetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualnetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "cookieBasedAffinity": { - "description": "Cookie based affinity. Possible values are: 'Enabled' and 'Disabled'.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. Possible values are: 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the backend http settings resource Updating/Deleting/Failed", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol. Possible values are: 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "protocol": { - "description": "Protocol. Possible values are: 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Gets or sets subnets of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "ruleType": { - "description": "Rule type. Possible values are: 'Basic' and 'PathBasedRouting'.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU. Possible values are: 'Standard_Small', 'Standard_Medium', 'Standard_Large', 'WAF_Medium', and 'WAF_Large'.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "backendIPConfigurations": { - "description": "Gets collection of references to IP addresses defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRule": { - "description": "Gets outbound rules that use this backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "properties": { - "asn": { - "description": "Gets or sets this BGP speaker's ASN", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "Gets or sets the BGP peering address and BGP identifier of this BGP speaker", - "type": "string" - }, - "peerWeight": { - "description": "Gets or sets the weight added to routes learned from this BGP speaker", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "bytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "inboundNatPools": { - "description": "Read only. Inbound pools URIs that use this frontend IP.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Read only. Inbound rules URIs that use this frontend IP.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Gets load balancing rules URIs that use this frontend IP.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "Read only. Outbound rules URIs that use this frontend IP.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfiguration": { - "description": "IPConfiguration", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendIPConfiguration": { - "description": "A reference to a private IP address defined on a network interface of a VM. Traffic sent to the frontend port of each of the frontend IP configurations is forwarded to the backed IP.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535. ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the external endpoint. Possible values are 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the LocalNetworkGateway resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterface": { - "description": "A network interface in a resource group.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "NetworkInterface properties. ", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet in a virtual network resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkInterfaces": { - "description": "A collection of references to network interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A collection of references to subnets.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Outbound NAT pool of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "The load balancer rules that use this probe.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "", - "type": "string" - }, - "ipConfiguration": { - "description": "IPConfiguration", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A collection of references to subnets.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - } - }, - "required": [ - "protocol", - "sourceAddressPrefix", - "destinationAddressPrefix", - "access", - "direction" - ], - "type": "object" - }, - "SubResource": { - "description": "Azure resource manager sub resource properties.", - "properties": { - "id": { - "description": "Resource Identifier.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "ipConfigurations": { - "description": "Gets an array of references to the network interface IP configurations using subnet.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionStatus": { - "description": "Virtual network Gateway connection status. Possible values are 'Unknown', 'Connecting', 'Connected' and 'NotConnected'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressBytesTransferred": { - "description": "The egress bytes transferred in this connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressBytesTransferred": { - "description": "The ingress bytes transferred in this connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the VirtualNetworkGatewayConnection resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "virtualNetworkGateway1": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAddress": { - "description": "Gets or sets the privateIPAddress of the IP Configuration", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the VirtualNetworkGateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway sku name -Basic/HighPerformance/Standard", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway sku tier -Basic/HighPerformance/Standard", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client", - "properties": { - "vpnClientAddressPool": { - "description": "Gets or sets the reference of the Address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "provisioningState": { - "description": "The provisioning state of the VPN client revoked certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "provisioningState": { - "description": "The provisioning state of the VPN client root certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Gets or sets the certificate public data", - "type": "string" - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualnetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualnetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2015-06-15" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource Identifier.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2016-03-30/Microsoft.Network.NRP.json b/schemas/2016-03-30/Microsoft.Network.NRP.json deleted file mode 100644 index 735b2ebfdd..0000000000 --- a/schemas/2016-03-30/Microsoft.Network.NRP.json +++ /dev/null @@ -1,5461 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the ApplicationGateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Application Gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGatewayConnection properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "Gets or sets sku", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the loadBalancer.", - "type": "string" - }, - "properties": { - "description": "Properties of Load Balancer", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "NetworkInterface properties. ", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the publicIpAddress.", - "type": "string" - }, - "properties": { - "description": "PublicIpAddress properties", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets", - "properties": { - "addressPrefixes": { - "description": "Gets or sets List of address blocks reserved for this virtual network in CIDR notation", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend Address of application gateway", - "properties": { - "fqdn": { - "description": "Gets or sets the dns name", - "type": "string" - }, - "ipAddress": { - "description": "Gets or sets the ip address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of application gateway", - "properties": { - "backendAddresses": { - "description": "Gets or sets the backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Gets collection of references to IPs defined in NICs", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the backend address pool resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of application gateway", - "properties": { - "cookieBasedAffinity": { - "description": "Gets or sets the cookie affinity", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Gets or sets the port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Gets or sets probe resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the protocol", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the backend http settings resource Updating/Deleting/Failed", - "type": "string" - }, - "requestTimeout": { - "description": "Gets or sets request timeout", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of application gateway", - "properties": { - "privateIPAddress": { - "description": "Gets or sets the privateIPAddress of the Network Interface IP Configuration", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Gets or sets the reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend Port of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend Port of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend Port of application gateway", - "properties": { - "port": { - "description": "Gets or sets the frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the frontend port resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Http listener of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of Http listener of application gateway", - "properties": { - "frontendIPConfiguration": { - "description": "Gets or sets frontend IP configuration resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Gets or sets frontend port resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Gets or sets the host name of http listener ", - "type": "string" - }, - "protocol": { - "description": "Gets or sets the protocol", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the http listener resource Updating/Deleting/Failed", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Gets or sets the requireServerNameIndication of http listener ", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "Gets or sets ssl certificate resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of application gateway", - "properties": { - "provisioningState": { - "description": "Gets or sets Provisioning state of the application gateway subnet resource Updating/Deleting/Failed", - "type": "string" - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource.A subnet from where application gateway gets its private address ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of probe of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of probe of application gateway", - "properties": { - "backendAddressPool": { - "description": "Gets or sets backend address pool resource of URL path map ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Gets or sets backend http settings resource of URL path map ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Gets or sets the path rules of URL path map", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets path rule of URL path map resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of probe of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of application gateway", - "properties": { - "host": { - "description": "Gets or sets the host to send probe to ", - "type": "string" - }, - "interval": { - "description": "Gets or sets probing interval in seconds ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Gets or sets the relative path of probe ", - "type": "string" - }, - "protocol": { - "description": "Gets or sets the protocol", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the backend http settings resource Updating/Deleting/Failed", - "type": "string" - }, - "timeout": { - "description": "Gets or sets probing timeout in seconds ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "Gets or sets probing unhealthy threshold ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of Application Gateway", - "properties": { - "backendAddressPools": { - "description": "Gets or sets backend address pool of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Gets or sets backend http settings of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Gets or sets frontend IP addresses of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Gets or sets frontend ports of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Gets or sets subnets of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Gets or sets HTTP listeners of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Gets or sets probes of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the ApplicationGateway resource Updating/Deleting/Failed", - "type": "string" - }, - "requestRoutingRules": { - "description": "Gets or sets request routing rules of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Gets or sets resource GUID property of the ApplicationGateway resource", - "type": "string" - }, - "sku": { - "description": "Gets or sets sku of application gateway resource", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "Gets or sets ssl certificates of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "Gets or sets URL path map of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Request routing rule of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of Request routing rule of application gateway", - "properties": { - "backendAddressPool": { - "description": "Gets or sets backend address pool resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Gets or sets frontend port resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Gets or sets http listener resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the request routing rule resource Updating/Deleting/Failed", - "type": "string" - }, - "ruleType": { - "description": "Gets or sets the rule type", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "Gets or sets url path map resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of application gateway", - "properties": { - "capacity": { - "description": "Gets or sets capacity (instance count) of application gateway", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gets or sets name of application gateway SKU", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gets or sets tier of application gateway", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "data": { - "description": "Gets or sets the certificate data ", - "type": "string" - }, - "password": { - "description": "Gets or sets the certificate password ", - "type": "string" - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the ssl certificate resource Updating/Deleting/Failed", - "type": "string" - }, - "publicCertData": { - "description": "Gets or sets the certificate public data ", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMap of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of probe of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of probe of application gateway", - "properties": { - "defaultBackendAddressPool": { - "description": "Gets or sets default backend address pool resource of URL path map ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Gets or sets default backend http settings resource of URL path map ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Gets or sets path rule of URL path map resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the backend http settings resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "Gets or sets the authorization key", - "type": "string" - }, - "authorizationUseStatus": { - "description": "Gets or sets AuthorizationUseStatus", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of BackendAddressPool", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of BackendAddressPool", - "properties": { - "backendIPConfigurations": { - "description": "Gets collection of references to IPs defined in NICs", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Gets Load Balancing rules that use this Backend Address Pool", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRule": { - "description": "Gets outbound rules that use this Backend Address Pool", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "properties": { - "asn": { - "description": "Gets or sets this BGP speaker's ASN", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "Gets or sets the BGP peering address and BGP identifier of this BGP speaker", - "type": "string" - }, - "peerWeight": { - "description": "Gets or sets the weight added to routes learned from this BGP speaker", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DHCPOptions contains an array of DNS servers available to VMs deployed in the virtual networkStandard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "Gets or sets list of DNS servers IP addresses", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in a ExpressRouteCircuit resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in a ExpressRouteCircuit resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering config", - "properties": { - "advertisedPublicPrefixes": { - "description": "Gets or sets the reference of AdvertisedPublicPrefixes", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "Gets or sets AdvertisedPublicPrefixState of the Peering resource ", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "Gets or Sets CustomerAsn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "Gets or Sets RoutingRegistryName of the config.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "Gets or sets the azure ASN", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "Gets or sets the Microsoft peering config", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "Gets or sets the peer ASN", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "Gets or sets PeeringType", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "Gets or sets the primary port", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "Gets or sets the primary address prefix", - "type": "string" - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "secondaryAzurePort": { - "description": "Gets or sets the secondary port", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "Gets or sets the secondary address prefix", - "type": "string" - }, - "sharedKey": { - "description": "Gets or sets the shared key", - "type": "string" - }, - "state": { - "description": "Gets or sets state of Peering", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets or peering stats", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "Gets or sets the vlan id", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit", - "properties": { - "allowClassicOperations": { - "description": "allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "Gets or sets list of authorizations", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "Gets or sets CircuitProvisioningState state of the resource ", - "type": "string" - }, - "peerings": { - "description": "Gets or sets list of peerings", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "serviceKey": { - "description": "Gets or sets ServiceKey", - "type": "string" - }, - "serviceProviderNotes": { - "description": "Gets or sets ServiceProviderNotes", - "type": "string" - }, - "serviceProviderProperties": { - "description": "Gets or sets ServiceProviderProperties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "Gets or sets ServiceProviderProvisioningState state of the resource ", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit", - "properties": { - "bandwidthInMbps": { - "description": "Gets or sets BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "Gets or sets peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "Gets or sets serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains sku in an ExpressRouteCircuit", - "properties": { - "family": { - "description": "Gets or sets family of the sku.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gets or sets name of the sku.", - "type": "string" - }, - "tier": { - "description": "Gets or sets tier of the sku.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains Stats associated with the peering", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP Configuration of the load balancer", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer", - "properties": { - "inboundNatPools": { - "description": "Read only.Inbound pools URIs that use this frontend IP", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Read only.Inbound rules URIs that use this frontend IP", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Gets Load Balancing rules URIs that use this frontend IP", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "Read only.Outbound rules URIs that use this frontend IP", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Gets or sets the privateIPAddress of the IP Configuration", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Gets or sets the reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfiguration": { - "description": "IPConfiguration", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of IPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationPropertiesFormat": { - "description": "Properties of IPConfiguration", - "properties": { - "privateIPAddress": { - "description": "Gets or sets the privateIPAddress of the IP Configuration", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Gets or sets the reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the loadbalancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT pool", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool", - "properties": { - "backendPort": { - "description": "Gets or sets a port used for internal connections on the endpoint. The localPort attribute maps the eternal port of the endpoint to an internal port on a role. This is useful in scenarios where a role must communicate to an internal component on a port that is different from the one that is exposed externally. If not specified, the value of localPort is the same as the port attribute. Set the value of localPort to '*' to automatically assign an unallocated port that is discoverable using the runtime API", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Gets or sets a reference to frontend IP Addresses", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "Gets or sets the ending port range for the NAT pool. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "Gets or sets the starting port range for the NAT pool. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the transport protocol for the external endpoint. Possible values are Udp or Tcp", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the loadbalancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT rule", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of Inbound NAT rule", - "properties": { - "backendIPConfiguration": { - "description": "Gets or sets a reference to a private ip address defined on a NetworkInterface of a VM. Traffic sent to frontendPort of each of the frontendIPConfigurations is forwarded to the backed IP", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "Gets or sets a port used for internal connections on the endpoint. The localPort attribute maps the eternal port of the endpoint to an internal port on a role. This is useful in scenarios where a role must communicate to an internal component on a port that is different from the one that is exposed externally. If not specified, the value of localPort is the same as the port attribute. Set the value of localPort to '*' to automatically assign an unallocated port that is discoverable using the runtime API", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn availability Group. This setting is required when using the SQL Always ON availability Groups in SQL server. This setting can't be changed after you create the endpoint", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Gets or sets a reference to frontend IP Addresses", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Gets or sets the port for the external endpoint. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "Gets or sets the timeout for the Tcp idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to Tcp", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the transport protocol for the external endpoint. Possible values are Udp or Tcp", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of Load Balancer", - "properties": { - "backendAddressPools": { - "description": "Gets or sets Pools of backend IP addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Gets or sets frontend IP addresses of the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Gets or sets inbound NAT pools", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Gets or sets list of inbound rules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Gets or sets load balancing rules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "Gets or sets outbound NAT rules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Gets or sets list of Load balancer probes", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource GUID property of the Load balancer resource", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "Rules of the load balancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer", - "properties": { - "backendAddressPool": { - "description": "Gets or sets a reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "Gets or sets a port used for internal connections on the endpoint. The localPort attribute maps the eternal port of the endpoint to an internal port on a role. This is useful in scenarios where a role must communicate to an internal component on a port that is different from the one that is exposed externally. If not specified, the value of localPort is the same as the port attribute. Set the value of localPort to '*' to automatically assign an unallocated port that is discoverable using the runtime API", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn availability Group. This setting is required when using the SQL Always ON availability Groups in SQL server. This setting can't be changed after you create the endpoint", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Gets or sets a reference to frontend IP Addresses", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Gets or sets the port for the external endpoint. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "Gets or sets the timeout for the Tcp idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to Tcp", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "Gets or sets the load distribution policy for this rule", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Gets or sets the reference of the load balancer probe used by the Load Balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the transport protocol for the external endpoint. Possible values are Udp or Tcp", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site Address space", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the LocalNetworkGateway resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource GUID property of the LocalNetworkGateway resource", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterface": { - "description": "A NetworkInterface in a resource group", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "NetworkInterface properties. ", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "Dns Settings of a network interface", - "properties": { - "appliedDnsServers": { - "description": "Gets or sets list of Applied DNS servers IP addresses", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "Gets or sets list of DNS servers IP addresses", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Gets or sets the Internal DNS name", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Gets or sets internal domain name suffix of the NIC.", - "type": "string" - }, - "internalFqdn": { - "description": "Gets or sets the internal FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a NetworkInterface", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of IPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IPConfiguration", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "Gets or sets the reference of ApplicationGatewayBackendAddressPool resource", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "Gets or sets the reference of LoadBalancerBackendAddressPool resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "Gets or sets list of references of LoadBalancerInboundNatRules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the NIC", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Gets or sets PrivateIP address version (IPv4/IPv6)", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "", - "type": "string" - }, - "publicIPAddress": { - "description": "PublicIPAddress resource", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet in a VirtualNetwork resource", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "Gets or sets DNS Settings in NetworkInterface", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Gets or sets whether IPForwarding is enabled on the NIC", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Gets or sets list of IPConfigurations of the NetworkInterface", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "Gets the MAC Address of the network interface", - "type": "string" - }, - "networkSecurityGroup": { - "description": "Gets or sets the reference of the NetworkSecurityGroup resource", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary NIC on a virtual machine", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource GUID property of the network interface resource", - "type": "string" - }, - "virtualMachine": { - "description": "Gets or sets the reference of a VirtualMachine", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource", - "properties": { - "defaultSecurityRules": { - "description": "Gets or sets Default security rules of network security group", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkInterfaces": { - "description": "Gets collection of references to Network Interfaces", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource GUID property of the network security group resource", - "type": "string" - }, - "securityRules": { - "description": "Gets or sets Security rules of network security group", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "Gets collection of references to subnets", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the loadbalancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Outbound NAT pool of the loadbalancer", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the loadbalancer", - "properties": { - "allocatedOutboundPorts": { - "description": "Gets or sets the number of outbound ports to be used for SNAT", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "Gets or sets a reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Gets or sets Frontend IP addresses of the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "Probe": { - "description": "Load balancer Probe", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "properties": { - "intervalInSeconds": { - "description": "Gets or sets the interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Gets Load balancer rules that use this probe", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "Gets or sets the number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure. ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Gets or sets Port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the protocol of the end point. Possible values are http pr Tcp. If Tcp is specified, a received ACK is required for the probe to be successful. If http is specified,a 200 OK response from the specifies URI is required for the probe to be successful", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "requestPath": { - "description": "Gets or sets the URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "PublicIPAddress resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "PublicIpAddress properties", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "PublicIpAddress properties", - "properties": { - "dnsSettings": { - "description": "Gets or sets FQDN of the DNS record associated with the public IP address", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "Gets or sets the idle timeout of the public IP address", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "", - "type": "string" - }, - "ipConfiguration": { - "description": "IPConfiguration", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "Gets or sets PublicIP address version (IPv4/IPv6)", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "Gets or sets PublicIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Gets or sets resource GUID property of the PublicIP resource", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "Gets or sets the destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "Gets or sets the IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "Gets or sets the type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "RouteTable resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "Gets or sets Provisioning state of the resource Updating/Deleting/Failed", - "type": "string" - }, - "routes": { - "description": "Gets or sets Routes in a Route Table", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "Gets collection of references to subnets", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "properties": { - "access": { - "description": "Gets or sets network traffic is allowed or denied. Possible values are 'Allow' and 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "Gets or sets a description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "Gets or sets destination address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. ", - "type": "string" - }, - "destinationPortRange": { - "description": "Gets or sets Destination Port or Range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "direction": { - "description": "Gets or sets the direction of the rule.InBound or Outbound. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Gets or sets the priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets Network protocol this rule applies to. Can be Tcp, Udp or All(*).", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "Gets or sets source address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourcePortRange": { - "description": "Gets or sets Source Port or Range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - } - }, - "required": [ - "protocol", - "sourceAddressPrefix", - "destinationAddressPrefix", - "access", - "direction" - ], - "type": "object" - }, - "SubResource": { - "properties": { - "id": { - "description": "Resource Id", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a VirtualNetwork resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "Gets or sets Address prefix for the subnet.", - "type": "string" - }, - "ipConfigurations": { - "description": "Gets array of references to the network interface IP configurations using subnet", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "Gets or sets the reference of the NetworkSecurityGroup resource", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "routeTable": { - "description": "Gets or sets the reference of the RouteTable resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionStatus": { - "description": "Virtual network Gateway connection status", - "oneOf": [ - { - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type IPsec/Dedicated/VpnClient/Vnet2Vnet", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressBytesTransferred": { - "description": "The Egress Bytes Transferred in this connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp Flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressBytesTransferred": { - "description": "The Ingress Bytes Transferred in this connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the VirtualNetworkGatewayConnection resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource GUID property of the VirtualNetworkGatewayConnection resource", - "type": "string" - }, - "routingWeight": { - "description": "The Routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPsec share key.", - "type": "string" - }, - "virtualNetworkGateway1": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IpConfiguration for Virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAddress": { - "description": "Gets or sets the privateIPAddress of the IP Configuration", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Gets or sets the reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp Flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "Gets or sets the reference of the LocalNetworkGateway resource which represents Local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IpConfigurations for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the VirtualNetworkGateway resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource GUID property of the VirtualNetworkGateway resource", - "type": "string" - }, - "sku": { - "description": "Gets or sets the reference of the VirtualNetworkGatewaySku resource which represents the sku selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "Gets or sets the reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway sku name -Basic/HighPerformance/Standard", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway sku tier -Basic/HighPerformance/Standard", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "properties": { - "addressSpace": { - "description": "Gets or sets AddressSpace that contains an array of IP address ranges that can be used by subnets", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "Gets or sets DHCPOptions that contains an array of DNS servers available to VMs deployed in the virtual network", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets or sets Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource GUID property of the VirtualNetwork resource", - "type": "string" - }, - "subnets": { - "description": "Gets or sets List of subnets in a VirtualNetwork", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client", - "properties": { - "vpnClientAddressPool": { - "description": "Gets or sets the reference of the Address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway", - "properties": { - "provisioningState": { - "description": "Gets or sets Provisioning state of the VPN client revoked certificate resource Updating/Deleting/Failed", - "type": "string" - }, - "thumbprint": { - "description": "Gets or sets the revoked Vpn client certificate thumbprint", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "provisioningState": { - "description": "Gets or sets Provisioning state of the VPN client root certificate resource Updating/Deleting/Failed", - "type": "string" - }, - "publicCertData": { - "description": "Gets or sets the certificate public data", - "type": "string" - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2016-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2016-06-01/Microsoft.Network.NRP.json b/schemas/2016-06-01/Microsoft.Network.NRP.json deleted file mode 100644 index 5396275408..0000000000 --- a/schemas/2016-06-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,5551 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the ApplicationGateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Application Gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGatewayConnection properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "Gets or sets sku", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the loadBalancer.", - "type": "string" - }, - "properties": { - "description": "Properties of Load Balancer", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "NetworkInterface properties. ", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the publicIpAddress.", - "type": "string" - }, - "properties": { - "description": "PublicIpAddress properties", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets", - "properties": { - "addressPrefixes": { - "description": "Gets or sets list of address blocks reserved for this virtual network in CIDR notation", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Authentication certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Properties of Authentication certificates of application gateway", - "properties": { - "data": { - "description": "Certificate public data ", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend Address of application gateway", - "properties": { - "fqdn": { - "description": "Dns name", - "type": "string" - }, - "ipAddress": { - "description": "Ip address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of application gateway", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in NICs", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of application gateway", - "properties": { - "authenticationCertificates": { - "description": "Array of references to Application Gateway Authentication Certificates", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie affinity", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource Updating/Deleting/Failed", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of application gateway", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the Network Interface IP Configuration", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend Port of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend Port of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend Port of application gateway", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Http listener of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of Http listener of application gateway", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of http listener ", - "type": "string" - }, - "protocol": { - "description": "Protocol", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the http listener resource Updating/Deleting/Failed", - "type": "string" - }, - "requireServerNameIndication": { - "description": "RequireServerNameIndication of http listener ", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "Ssl certificate resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of application gateway", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource Updating/Deleting/Failed", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of probe of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of probe of application gateway", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of probe of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of application gateway", - "properties": { - "host": { - "description": "Host to send probe to ", - "type": "string" - }, - "interval": { - "description": "Probing interval in seconds ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe ", - "type": "string" - }, - "protocol": { - "description": "Protocol", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource Updating/Deleting/Failed", - "type": "string" - }, - "timeout": { - "description": "Probing timeout in seconds ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "Probing unhealthy threshold ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of Application Gateway", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "HTTP listeners of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the ApplicationGateway resource Updating/Deleting/Failed", - "type": "string" - }, - "requestRoutingRules": { - "description": "Request routing rules of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource guid property of the ApplicationGateway resource", - "type": "string" - }, - "sku": { - "description": "Sku of application gateway resource", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of application gateway resource", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of application gateway resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Request routing rule of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of Request routing rule of application gateway", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource Updating/Deleting/Failed", - "type": "string" - }, - "ruleType": { - "description": "Rule type", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "Url path map resource of application gateway ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of application gateway", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of application gateway SKU", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of application gateway", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "data": { - "description": "SSL Certificate data ", - "type": "string" - }, - "password": { - "description": "SSL Certificate password ", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the ssl certificate resource Updating/Deleting/Failed", - "type": "string" - }, - "publicCertData": { - "description": "SSL Certificate public data ", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application gateway SSL policy", - "properties": { - "disabledSslProtocols": { - "description": "SSL protocols to be disabled on Application Gateway", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMap of application gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of application gateway", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "Gets or sets the authorization key", - "type": "string" - }, - "authorizationUseStatus": { - "description": "Gets or sets AuthorizationUseStatus", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of BackendAddressPool", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of BackendAddressPool", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "properties": { - "asn": { - "description": "Gets or sets this BGP speaker's ASN", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "Gets or sets the BGP peering address and BGP identifier of this BGP speaker", - "type": "string" - }, - "peerWeight": { - "description": "Gets or sets the weight added to routes learned from this BGP speaker", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DHCPOptions contains an array of DNS servers available to VMs deployed in the virtual networkStandard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "Gets or sets list of DNS servers IP addresses", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in a ExpressRouteCircuit resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in a ExpressRouteCircuit resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering config", - "properties": { - "advertisedPublicPrefixes": { - "description": "Gets or sets the reference of AdvertisedPublicPrefixes", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "Gets or sets AdvertisedPublicPrefixState of the Peering resource ", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "Gets or Sets CustomerAsn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "Gets or Sets RoutingRegistryName of the config.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "Gets or sets the azure ASN", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "Gets or sets the GatewayManager Etag", - "type": "string" - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "Gets or sets the Microsoft peering config", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "Gets or sets the peer ASN", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "Gets or sets PeeringType", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "Gets or sets the primary port", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "Gets or sets the primary address prefix", - "type": "string" - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "secondaryAzurePort": { - "description": "Gets or sets the secondary port", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "Gets or sets the secondary address prefix", - "type": "string" - }, - "sharedKey": { - "description": "Gets or sets the shared key", - "type": "string" - }, - "state": { - "description": "Gets or sets state of Peering", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets or peering stats", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "Gets or sets the vlan id", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit", - "properties": { - "allowClassicOperations": { - "description": "allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "Gets or sets list of authorizations", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "Gets or sets CircuitProvisioningState state of the resource ", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "Gets or sets the GatewayManager Etag", - "type": "string" - }, - "peerings": { - "description": "Gets or sets list of peerings", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "serviceKey": { - "description": "Gets or sets ServiceKey", - "type": "string" - }, - "serviceProviderNotes": { - "description": "Gets or sets ServiceProviderNotes", - "type": "string" - }, - "serviceProviderProperties": { - "description": "Gets or sets ServiceProviderProperties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "Gets or sets ServiceProviderProvisioningState state of the resource ", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit", - "properties": { - "bandwidthInMbps": { - "description": "Gets or sets BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "Gets or sets peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "Gets or sets serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains sku in an ExpressRouteCircuit", - "properties": { - "family": { - "description": "Gets or sets family of the sku.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gets or sets name of the sku.", - "type": "string" - }, - "tier": { - "description": "Gets or sets tier of the sku.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains Stats associated with the peering", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP Configuration of the load balancer", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer", - "properties": { - "privateIPAddress": { - "description": "Gets or sets the privateIPAddress of the IP Configuration", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Gets or sets the reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT pool", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool", - "properties": { - "backendPort": { - "description": "Gets or sets a port used for internal connections on the endpoint. The localPort attribute maps the eternal port of the endpoint to an internal port on a role. This is useful in scenarios where a role must communicate to an internal component on a port that is different from the one that is exposed externally. If not specified, the value of localPort is the same as the port attribute. Set the value of localPort to '*' to automatically assign an unallocated port that is discoverable using the runtime API", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Gets or sets a reference to frontend IP Addresses", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "Gets or sets the ending port range for the NAT pool. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "Gets or sets the starting port range for the NAT pool. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the transport protocol for the endpoint. Possible values are Udp or Tcp", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the loadbalancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT rule", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of Inbound NAT rule", - "properties": { - "backendPort": { - "description": "Gets or sets a port used for internal connections on the endpoint. The localPort attribute maps the eternal port of the endpoint to an internal port on a role. This is useful in scenarios where a role must communicate to an internal component on a port that is different from the one that is exposed externally. If not specified, the value of localPort is the same as the port attribute. Set the value of localPort to '*' to automatically assign an unallocated port that is discoverable using the runtime API", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn availability Group. This setting is required when using the SQL Always ON availability Groups in SQL server. This setting can't be changed after you create the endpoint", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Gets or sets a reference to frontend IP Addresses", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Gets or sets the port for the external endpoint. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "Gets or sets the timeout for the Tcp idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to Tcp", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the transport protocol for the endpoint. Possible values are Udp or Tcp", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of Load Balancer", - "properties": { - "backendAddressPools": { - "description": "Gets or sets Pools of backend IP addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Gets or sets frontend IP addresses of the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Gets or sets inbound NAT pools", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Gets or sets list of inbound rules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Gets or sets load balancing rules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "Gets or sets outbound NAT rules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Gets or sets list of Load balancer probes", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the Load balancer resource", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "Rules of the load balancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer", - "properties": { - "backendAddressPool": { - "description": "Gets or sets a reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "Gets or sets a port used for internal connections on the endpoint. The localPort attribute maps the eternal port of the endpoint to an internal port on a role. This is useful in scenarios where a role must communicate to an internal component on a port that is different from the one that is exposed externally. If not specified, the value of localPort is the same as the port attribute. Set the value of localPort to '*' to automatically assign an unallocated port that is discoverable using the runtime API", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn availability Group. This setting is required when using the SQL Always ON availability Groups in SQL server. This setting can't be changed after you create the endpoint", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Gets or sets a reference to frontend IP Addresses", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Gets or sets the port for the external endpoint. You can specify any port number you choose, but the port numbers specified for each role in the service must be unique. Possible values range between 1 and 65535, inclusive", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "Gets or sets the timeout for the Tcp idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to Tcp", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "Gets or sets the load distribution policy for this rule", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Gets or sets the reference of the load balancer probe used by the Load Balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the transport protocol for the external endpoint. Possible values are Udp or Tcp", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site Address space", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the LocalNetworkGateway resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the LocalNetworkGateway resource", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "Dns settings of a network interface", - "properties": { - "appliedDnsServers": { - "description": "Gets or sets list of Applied DNS servers IP addresses", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "Gets or sets list of DNS servers IP addresses", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Gets or sets the internal DNS name", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Gets or sets internal domain name suffix of the NIC.", - "type": "string" - }, - "internalFqdn": { - "description": "Gets or sets the internal fqdn.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a NetworkInterface", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of IPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IPConfiguration", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "Gets or sets the reference of ApplicationGatewayBackendAddressPool resource", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "Gets or sets the reference of LoadBalancerBackendAddressPool resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "Gets or sets list of references of LoadBalancerInboundNatRules", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the NIC", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Gets or sets PrivateIP address version (IPv4/IPv6)", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "", - "type": "string" - }, - "publicIPAddress": { - "description": "PublicIPAddress resource", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet in a VirtualNetwork resource", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "Gets or sets DNS settings in network interface", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Gets or sets whether IPForwarding is enabled on the NIC", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Gets or sets list of IPConfigurations of the network interface", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "Gets the MAC address of the network interface", - "type": "string" - }, - "networkSecurityGroup": { - "description": "Gets or sets the reference of the NetworkSecurityGroup resource", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary NIC on a virtual machine", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the network interface resource", - "type": "string" - }, - "virtualMachine": { - "description": "Gets or sets the reference of a VirtualMachine", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource", - "properties": { - "defaultSecurityRules": { - "description": "Gets or default security rules of network security group", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the network security group resource", - "type": "string" - }, - "securityRules": { - "description": "Gets or sets security rules of network security group", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Outbound NAT pool of the load balancer", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer", - "properties": { - "allocatedOutboundPorts": { - "description": "Gets or sets the number of outbound ports to be used for SNAT", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "Gets or sets a reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Gets or sets Frontend IP addresses of the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "Probe": { - "description": "Load balancer Probe", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "properties": { - "intervalInSeconds": { - "description": "Gets or sets the interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "Gets or sets the number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure. ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Gets or sets Port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets the protocol of the end point. Possible values are http or Tcp. If Tcp is specified, a received ACK is required for the probe to be successful. If http is specified,a 200 OK response from the specifies URI is required for the probe to be successful", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "requestPath": { - "description": "Gets or sets the URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "PublicIPAddress resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "PublicIpAddress properties", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "PublicIpAddress properties", - "properties": { - "dnsSettings": { - "description": "Gets or sets FQDN of the DNS record associated with the public IP address", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "Gets or sets the idle timeout of the public IP address", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "", - "type": "string" - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "Gets or sets PublicIP address version (IPv4/IPv6)", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "Gets or sets PublicIP allocation method (Static/Dynamic)", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the PublicIP resource", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource", - "properties": { - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of ResourceNavigationLink", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "Gets or sets the destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "Gets or sets the IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "Gets or sets the type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the resource Updating/Deleting/Failed", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "RouteTable resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "Gets provisioning state of the resource Updating/Deleting/Failed", - "type": "string" - }, - "routes": { - "description": "Gets or sets Routes in a Route Table", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "properties": { - "access": { - "description": "Gets or sets network traffic is allowed or denied. Possible values are 'Allow' and 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "Gets or sets a description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "Gets or sets destination address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. ", - "type": "string" - }, - "destinationPortRange": { - "description": "Gets or sets Destination Port or Range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "direction": { - "description": "Gets or sets the direction of the rule.InBound or Outbound. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Gets or sets the priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Gets or sets Network protocol this rule applies to. Can be Tcp, Udp or All(*).", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "Gets or sets source address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourcePortRange": { - "description": "Gets or sets Source Port or Range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - } - }, - "required": [ - "protocol", - "sourceAddressPrefix", - "destinationAddressPrefix", - "access", - "direction" - ], - "type": "object" - }, - "SubResource": { - "properties": { - "id": { - "description": "Resource Id", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a VirtualNetwork resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets or sets the name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "Gets or sets Address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "Gets or sets the reference of the NetworkSecurityGroup resource", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the resource", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets array of references to the external resources using subnet", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "Gets or sets the reference of the RouteTable resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "location": { - "description": "Resource location", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionStatus": { - "description": "Virtual network Gateway connection status", - "oneOf": [ - { - "enum": [ - "Unknown", - "Connecting", - "Connected", - "NotConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type IPsec/Dedicated/VpnClient/Vnet2Vnet", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressBytesTransferred": { - "description": "The Egress Bytes Transferred in this connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp Flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressBytesTransferred": { - "description": "The Ingress Bytes Transferred in this connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the VirtualNetworkGatewayConnection resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the VirtualNetworkGatewayConnection resource", - "type": "string" - }, - "routingWeight": { - "description": "The Routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPsec share key.", - "type": "string" - }, - "virtualNetworkGateway1": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IpConfiguration for Virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "Gets or sets PrivateIP allocation method", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "publicIPAddress": { - "description": "Gets or sets the reference of the PublicIP resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Gets or sets the reference of the subnet resource", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp Flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "Gets or sets the reference of the LocalNetworkGateway resource which represents Local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IpConfigurations for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the VirtualNetworkGateway resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the VirtualNetworkGateway resource", - "type": "string" - }, - "sku": { - "description": "Gets or sets the reference of the VirtualNetworkGatewaySku resource which represents the sku selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "Gets or sets the reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway sku name -Basic/HighPerformance/Standard/UltraPerformance", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway sku tier -Basic/HighPerformance/Standard/UltraPerformance", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a VirtualNetwork resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets or sets the name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "properties": { - "allowForwardedTraffic": { - "description": "Gets or sets whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "Gets or sets if gatewayLinks can be used in remote virtual network’s link to this virtual network", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Gets or sets whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "Gets the status of the virtual network peering", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the resource", - "type": "string" - }, - "remoteVirtualNetwork": { - "description": "Gets or sets the reference of the remote virtual network", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "Gets or sets if remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only 1 peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "properties": { - "VirtualNetworkPeerings": { - "description": "Gets or sets list of peerings in a VirtualNetwork", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "addressSpace": { - "description": "Gets or sets AddressSpace that contains an array of IP address ranges that can be used by subnets", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "Gets or sets DHCPOptions that contains an array of DNS servers available to VMs deployed in the virtual network", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets provisioning state of the PublicIP resource Updating/Deleting/Failed", - "type": "string" - }, - "resourceGuid": { - "description": "Gets or sets resource guid property of the VirtualNetwork resource", - "type": "string" - }, - "subnets": { - "description": "Gets or sets list of subnets in a VirtualNetwork", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client", - "properties": { - "vpnClientAddressPool": { - "description": "Gets or sets the reference of the Address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway", - "properties": { - "provisioningState": { - "description": "Gets provisioning state of the VPN client revoked certificate resource Updating/Deleting/Failed", - "type": "string" - }, - "thumbprint": { - "description": "Gets or sets the revoked Vpn client certificate thumbprint", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "provisioningState": { - "description": "Gets provisioning state of the VPN client root certificate resource Updating/Deleting/Failed", - "type": "string" - }, - "publicCertData": { - "description": "Gets or sets the certificate public data", - "type": "string" - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated", - "type": "string" - }, - "id": { - "description": "Resource Id", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2016-09-01/Microsoft.Network.NRP.json b/schemas/2016-09-01/Microsoft.Network.NRP.json deleted file mode 100644 index 74889282c8..0000000000 --- a/schemas/2016-09-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,5867 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGatewayConnection properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "NetworkInterface properties. ", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity. Possible values are: 'Enabled' and 'Disabled'.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. Possible values are: 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol. Possible values are: 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "protocol": { - "description": "Protocol. Possible values are: 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "ruleType": { - "description": "Rule type. Possible values are: 'Basic' and 'PathBasedRouting'.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU. Possible values are: 'Standard_Small', 'Standard_Medium', 'Standard_Large', 'WAF_Medium', and 'WAF_Large'.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway. Possible values are: 'Standard' and 'WAF'.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application gateway SSL policy.", - "properties": { - "disabledSslProtocols": { - "description": "SSL protocols to be disabled on application gateway. Possible values are: 'TLSv1_0', 'TLSv1_1', and 'TLSv1_2'.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "enabled": { - "description": "Whether the web application firewall is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode. Possible values are: 'Detection' and 'Prevention'.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535. ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the external endpoint. Possible values are 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "required": [ - "localNetworkAddressSpace" - ], - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet in a virtual network resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Outbound NAT pool of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of ResourceNavigationLink.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - } - }, - "required": [ - "protocol", - "sourceAddressPrefix", - "destinationAddressPrefix", - "access", - "direction" - ], - "type": "object" - }, - "SubResource": { - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "virtualNetworkGateway1": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ipConfigurations", - "gatewayType", - "vpnType" - ], - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name. Possible values are: 'Basic', 'HighPerformance','Standard', and 'UltraPerformance'.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier. Possible values are: 'Basic', 'HighPerformance','Standard', and 'UltraPerformance'.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "tier" - ], - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2016-12-01/Microsoft.Network.NRP.json b/schemas/2016-12-01/Microsoft.Network.NRP.json deleted file mode 100644 index a43b3fc4bd..0000000000 --- a/schemas/2016-12-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,6229 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGatewayConnection properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "NetworkInterface properties. ", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity. Possible values are: 'Enabled' and 'Disabled'.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. Possible values are: 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol. Possible values are: 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "protocol": { - "description": "Protocol. Possible values are: 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "ruleType": { - "description": "Rule type. Possible values are: 'Basic' and 'PathBasedRouting'.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU. Possible values are: 'Standard_Small', 'Standard_Medium', 'Standard_Large', 'WAF_Medium', and 'WAF_Large'.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway. Possible values are: 'Standard' and 'WAF'.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application gateway SSL policy.", - "properties": { - "disabledSslProtocols": { - "description": "SSL protocols to be disabled on application gateway. Possible values are: 'TLSv1_0', 'TLSv1_1', and 'TLSv1_2'.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode. Possible values are: 'Detection' and 'Prevention'.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535. ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the external endpoint. Possible values are 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet in a virtual network resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Outbound NAT pool of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of ResourceNavigationLink.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - } - }, - "required": [ - "protocol", - "sourceAddressPrefix", - "destinationAddressPrefix", - "access", - "direction" - ], - "type": "object" - }, - "SubResource": { - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "virtualNetworkGateway1": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name. Possible values are: 'Basic', 'HighPerformance','Standard', and 'UltraPerformance'.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier. Possible values are: 'Basic', 'HighPerformance','Standard', and 'UltraPerformance'.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2016-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2017-03-01/Microsoft.Network.NRP.json b/schemas/2017-03-01/Microsoft.Network.NRP.json deleted file mode 100644 index a16f658f95..0000000000 --- a/schemas/2017-03-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,6531 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGatewayConnection properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "NetworkInterface properties. ", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application gateway SSL policy.", - "properties": { - "disabledSslProtocols": { - "description": "SSL protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The DH Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535. ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the external endpoint. Possible values are 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet in a virtual network resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Outbound NAT pool of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of ResourceNavigationLink.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - } - }, - "required": [ - "protocol", - "sourceAddressPrefix", - "destinationAddressPrefix", - "access", - "direction" - ], - "type": "object" - }, - "SubResource": { - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2017-03-30/Microsoft.Network.NRP.json b/schemas/2017-03-30/Microsoft.Network.NRP.json deleted file mode 100644 index 8106b8d487..0000000000 --- a/schemas/2017-03-30/Microsoft.Network.NRP.json +++ /dev/null @@ -1,6531 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGatewayConnection properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "NetworkInterface properties. ", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application gateway SSL policy.", - "properties": { - "disabledSslProtocols": { - "description": "SSL protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Inbound NAT pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The DH Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535. ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the external endpoint. Possible values are 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "LocalNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet in a virtual network resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Network Security Group resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Outbound NAT pool of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of ResourceNavigationLink.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Table resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - } - }, - "required": [ - "protocol", - "sourceAddressPrefix", - "destinationAddressPrefix", - "access", - "direction" - ], - "type": "object" - }, - "SubResource": { - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "VirtualNetworkGateway properties", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "A common class for general resource information", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of application gateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Route resource", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-03-30" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2017-06-01/Microsoft.Network.NRP.json b/schemas/2017-06-01/Microsoft.Network.NRP.json deleted file mode 100644 index 2e02f93031..0000000000 --- a/schemas/2017-06-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,7261 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Transport" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The DH Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535. ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the external endpoint. Possible values are 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2017-08-01/Microsoft.Network.NRP.json b/schemas/2017-08-01/Microsoft.Network.NRP.json deleted file mode 100644 index a6908a9c0d..0000000000 --- a/schemas/2017-08-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,7346 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are: 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The DH Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535. ", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the external endpoint. Possible values are 'Udp' or 'Tcp'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2017-09-01/Microsoft.Network.NRP.json b/schemas/2017-09-01/Microsoft.Network.NRP.json deleted file mode 100644 index 8e601090ca..0000000000 --- a/schemas/2017-09-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,7531 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The DH Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in a Virtual Network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if Vm protection is enabled for all the subnets in a Virtual Network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-09-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2017-10-01/Microsoft.Network.NRP.json b/schemas/2017-10-01/Microsoft.Network.NRP.json deleted file mode 100644 index f3c9dbaffd..0000000000 --- a/schemas/2017-10-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,7777 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The DH Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in a Virtual Network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if Vm protection is enabled for all the subnets in a Virtual Network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2017-11-01/Microsoft.Network.NRP.json b/schemas/2017-11-01/Microsoft.Network.NRP.json deleted file mode 100644 index a8be3279d4..0000000000 --- a/schemas/2017-11-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,7782 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the public IP address", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The DH Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in a Virtual Network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if Vm protection is enabled for all the subnets in a Virtual Network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2017-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2018-01-01/Microsoft.Network.NRP.json b/schemas/2018-01-01/Microsoft.Network.NRP.json deleted file mode 100644 index 0954fe89eb..0000000000 --- a/schemas/2018-01-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,7806 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The PeeringType. Possible values are: 'AzurePublicPeering', 'AzurePrivatePeering', and 'MicrosoftPeering'.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the public IP address", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The DH Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All.'", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in a Virtual Network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if Vm protection is enabled for all the subnets in a Virtual Network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-01-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2018-02-01/Microsoft.Network.NRP.json b/schemas/2018-02-01/Microsoft.Network.NRP.json deleted file mode 100644 index 4e2d873ff7..0000000000 --- a/schemas/2018-02-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,8436 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCrossConnection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Frontend port resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the public IP address", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http', 'Tcp' or 'Https'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2018-04-01/Microsoft.Network.NRP.json b/schemas/2018-04-01/Microsoft.Network.NRP.json deleted file mode 100644 index c2b3321049..0000000000 --- a/schemas/2018-04-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,9935 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCrossConnection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualWAN", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnSite", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleBounds": { - "description": "Application Gateway autoscale bounds on number of Application Gateway instance.", - "properties": { - "max": { - "description": "Upper bound on number of Application Gateway instances.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Lower bound on number of Application Gateway instances.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "min", - "max" - ], - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "bounds": { - "description": "Autoscale bounds", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "bounds" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of URLs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "internalPublicIpAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The Firewall Internal Load Balancer IP to be used as the next hop in User Defined Routes.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is populated in the output.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by a Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by a Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Parameters for HubVirtualNetworkConnection", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the public IP address", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Policies": { - "description": "Policies for vpn gateway.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http', 'Tcp', or 'Https'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "hubVirtualNetworkConnections": { - "description": "list of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN", - "properties": { - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection", - "properties": { - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "list of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policies": { - "description": "The policies applied to this vpn gateway.", - "oneOf": [ - { - "$ref": "#/definitions/Policies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWAN": { - "description": "The VirtualWAN to which the vpnSite belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2018-05-01/subscriptionDeploymentTemplate.json b/schemas/2018-05-01/subscriptionDeploymentTemplate.json index 47c3bb30af..4fba8e23d0 100644 --- a/schemas/2018-05-01/subscriptionDeploymentTemplate.json +++ b/schemas/2018-05-01/subscriptionDeploymentTemplate.json @@ -1196,48 +1196,6 @@ { "$ref": "https://schema.management.azure.com/schemas/2021-01-01/Microsoft.MarketplaceOrdering.json#/subscription_resourceDefinitions/offerTypes_publishers_offers_plans_agreements" }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/subscription_resourceDefinitions/networkManagerConnections" - }, { "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.TrafficManager.json#/subscription_resourceDefinitions/trafficManagerUserMetricsKeys" }, diff --git a/schemas/2018-06-01/Microsoft.Network.NRP.json b/schemas/2018-06-01/Microsoft.Network.NRP.json deleted file mode 100644 index afe0ac03a7..0000000000 --- a/schemas/2018-06-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,9935 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCrossConnection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualWAN", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnSite", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleBounds": { - "description": "Application Gateway autoscale bounds on number of Application Gateway instance.", - "properties": { - "max": { - "description": "Upper bound on number of Application Gateway instances.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Lower bound on number of Application Gateway instances.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "min", - "max" - ], - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "bounds": { - "description": "Autoscale bounds", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "bounds" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of URLs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "internalPublicIpAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The Firewall Internal Load Balancer IP to be used as the next hop in User Defined Routes.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is populated in the output.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by a Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by a Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Parameters for HubVirtualNetworkConnection", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the public IP address", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundNatRules": { - "description": "The outbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundNatRule": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundNatRulePropertiesFormat": { - "description": "Outbound NAT pool of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "backendAddressPool" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Policies": { - "description": "Policies for vpn gateway.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http', 'Tcp', or 'Https'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "hubVirtualNetworkConnections": { - "description": "list of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN", - "properties": { - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection", - "properties": { - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "list of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policies": { - "description": "The policies applied to this vpn gateway.", - "oneOf": [ - { - "$ref": "#/definitions/Policies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWAN": { - "description": "The VirtualWAN to which the vpnSite belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2018-07-01/Microsoft.Network.NRP.json b/schemas/2018-07-01/Microsoft.Network.NRP.json deleted file mode 100644 index 515fe1ab9f..0000000000 --- a/schemas/2018-07-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,10561 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCrossConnection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualWAN", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnSite", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleBounds": { - "description": "Application Gateway autoscale bounds on number of Application Gateway instance.", - "properties": { - "max": { - "description": "Upper bound on number of Application Gateway instances.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Lower bound on number of Application Gateway instances.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "min", - "max" - ], - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "bounds": { - "description": "Autoscale bounds", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "bounds" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of URLs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "internalPublicIpAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The Firewall Internal Load Balancer IP to be used as the next hop in User Defined Routes.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is populated in the output.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by a Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by a Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGlobalReach": { - "description": "Flag to enable Global Reach on the circuit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard' and 'Premium'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Parameters for HubVirtualNetworkConnection", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "virtualMachine": { - "description": "The reference of a virtual machine.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol - TCP, UDP or All", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Policies": { - "description": "Policies for vpn gateway.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http', 'Tcp', or 'Https'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipPrefix": { - "description": "The allocated Prefix", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the Public IP prefix resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddresses": { - "description": "The list of all referenced PublicIPAddresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP prefix resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ReferencedPublicIpAddress": { - "properties": { - "id": { - "description": "The PublicIPAddress Reference", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the service end point policy definition. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "service": { - "description": "service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "provisioningState": { - "description": "The provisioning state of the service endpoint policy. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the service endpoint policy resource.", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "hubVirtualNetworkConnections": { - "description": "list of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN", - "properties": { - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection", - "properties": { - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "list of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policies": { - "description": "The policies applied to this vpn gateway.", - "oneOf": [ - { - "$ref": "#/definitions/Policies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWAN": { - "description": "The VirtualWAN to which the vpnSite belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2018-08-01/Microsoft.Network.NRP.json b/schemas/2018-08-01/Microsoft.Network.NRP.json deleted file mode 100644 index d0fd0886a8..0000000000 --- a/schemas/2018-08-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,12982 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCrossConnection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "ExpressRoute gateway resource properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "interfaceEndpoints": { - "description": "Microsoft.Network/interfaceEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the interface endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the interface endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/InterfaceEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/interfaceEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualWAN", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualWans_p2sVpnServerConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnSite", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "minCapacity": { - "description": "Lower bound on number of Application Gateway instances", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Trusted Root certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyvaultSecretId": { - "description": "KeyVault Secret Id for certificate.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the trusted root certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "maximum": 500, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "privateIPAddress": { - "description": "The Firewall Internal Load Balancer IP to be used as the next hop in User Defined Routes.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "Container": { - "description": "Reference to container resource in remote resource provider.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterface": { - "description": "Container network interface child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfiguration": { - "description": "The ip configuration for a container network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the container network interface IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of the container network interface IP configuration.", - "properties": {}, - "type": "object" - }, - "ContainerNetworkInterfacePropertiesFormat": { - "properties": { - "container": { - "description": "Reference to the container to which this container network interface is attached.", - "oneOf": [ - { - "$ref": "#/definitions/Container" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration from which this container network interface is created.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Reference to the ip configuration on this container nic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "EndpointService": { - "description": "Identifies the service being brought into the virtual network.", - "properties": { - "id": { - "description": "A unique identifier of the service being referenced by the interface endpoint.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGlobalReach": { - "description": "Flag to enable Global Reach on the circuit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard', 'Premium' or 'Basic'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the ExpressRoutePort resource.", - "type": "string" - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for HubVirtualNetworkConnection", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference of the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "InterfaceEndpointProperties": { - "description": "Properties of the interface endpoint.", - "properties": { - "endpointService": { - "description": "A reference to the service being brought into the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/EndpointService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "A first-party service's FQDN that is mapped to the private IP allocated via this interface endpoint.", - "type": "string" - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "tapConfigurations": { - "description": "A list of TapConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterfaceTapConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfiguration": { - "description": "Tap configuration in a Network Interface", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference of the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaces": { - "description": "List of child container network interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol - TCP, UDP or All", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway", - "properties": { - "p2SVpnServerConfiguration": { - "description": "The P2SVpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificate": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Radius client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat": { - "description": "Properties of the Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificate": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration Radius Server root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat": { - "description": "Properties of Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificate": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration VPN client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat": { - "description": "Properties of VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfiguration": { - "description": "P2SVpnServerConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigurationProperties": { - "description": "Parameters for P2SVpnServerConfiguration", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration that is unique within a VirtualWan in a resource group. This name can be used to access the resource along with Parent VirtualWan resource name.", - "type": "string" - }, - "p2SVpnServerConfigRadiusClientRootCertificates": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigRadiusServerRootCertificates": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRootCertificates": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "vpnProtocols for the P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http', 'Tcp', or 'Https'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipPrefix": { - "description": "The allocated Prefix", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the Public IP prefix resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddresses": { - "description": "The list of all referenced PublicIPAddresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP prefix resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ReferencedPublicIpAddress": { - "properties": { - "id": { - "description": "The PublicIPAddress Reference", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceAssociationLink": { - "description": "ServiceAssociationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceAssociationLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceAssociationLinkPropertiesFormat": { - "description": "Properties of ServiceAssociationLink.", - "properties": { - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "actions": { - "description": "Describes the actions permitted to the service upon delegation", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "Gets an array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAssociationLinks": { - "description": "Gets an array of references to services injecting into this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceAssociationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "list of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route", - "properties": { - "addressPrefixes": { - "description": "list of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table", - "properties": { - "routes": { - "description": "list of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'IPsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigurations": { - "description": "list of all P2SVpnServerConfigurations associated with the virtual wan.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "list of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations_childResource": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2018-10-01/Microsoft.Network.NRP.json b/schemas/2018-10-01/Microsoft.Network.NRP.json deleted file mode 100644 index aa2576e3de..0000000000 --- a/schemas/2018-10-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,13196 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCrossConnection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "ExpressRoute gateway resource properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "interfaceEndpoints": { - "description": "Microsoft.Network/interfaceEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the interface endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the interface endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/InterfaceEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/interfaceEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualWAN", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualWans_p2sVpnServerConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnSite", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "minCapacity": { - "description": "Lower bound on number of Application Gateway instances", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of rewrite rule set of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Trusted Root certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the trusted root certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "maximum": 500, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "Container": { - "description": "Reference to container resource in remote resource provider.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterface": { - "description": "Container network interface child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfiguration": { - "description": "The ip configuration for a container network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the container network interface IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of the container network interface IP configuration.", - "properties": {}, - "type": "object" - }, - "ContainerNetworkInterfacePropertiesFormat": { - "properties": { - "container": { - "description": "Reference to the container to which this container network interface is attached.", - "oneOf": [ - { - "$ref": "#/definitions/Container" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration from which this container network interface is created.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Reference to the ip configuration on this container nic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "EndpointService": { - "description": "Identifies the service being brought into the virtual network.", - "properties": { - "id": { - "description": "A unique identifier of the service being referenced by the interface endpoint.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGlobalReach": { - "description": "Flag to enable Global Reach on the circuit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard', 'Premium' or 'Basic'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the ExpressRoutePort resource.", - "type": "string" - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for HubVirtualNetworkConnection", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference of the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "InterfaceEndpointProperties": { - "description": "Properties of the interface endpoint.", - "properties": { - "endpointService": { - "description": "A reference to the service being brought into the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/EndpointService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "A first-party service's FQDN that is mapped to the private IP allocated via this interface endpoint.", - "type": "string" - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "tapConfigurations": { - "description": "A list of TapConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterfaceTapConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfiguration": { - "description": "Tap configuration in a Network Interface", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference of the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaces": { - "description": "List of child container network interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol - TCP, UDP or All", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway", - "properties": { - "p2SVpnServerConfiguration": { - "description": "The P2SVpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificate": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Radius client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat": { - "description": "Properties of the Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificate": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration Radius Server root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat": { - "description": "Properties of Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificate": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration VPN client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat": { - "description": "Properties of VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfiguration": { - "description": "P2SVpnServerConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigurationProperties": { - "description": "Parameters for P2SVpnServerConfiguration", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration that is unique within a VirtualWan in a resource group. This name can be used to access the resource along with Parent VirtualWan resource name.", - "type": "string" - }, - "p2SVpnServerConfigRadiusClientRootCertificates": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigRadiusServerRootCertificates": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRootCertificates": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "vpnProtocols for the P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http', 'Tcp', or 'Https'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipPrefix": { - "description": "The allocated Prefix", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the Public IP prefix resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddresses": { - "description": "The list of all referenced PublicIPAddresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP prefix resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ReferencedPublicIpAddress": { - "properties": { - "id": { - "description": "The PublicIPAddress Reference", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceAssociationLink": { - "description": "ServiceAssociationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceAssociationLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceAssociationLinkPropertiesFormat": { - "description": "Properties of ServiceAssociationLink.", - "properties": { - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "actions": { - "description": "Describes the actions permitted to the service upon delegation", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "Gets an array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAssociationLinks": { - "description": "Gets an array of references to services injecting into this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceAssociationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "list of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route", - "properties": { - "addressPrefixes": { - "description": "list of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table", - "properties": { - "routes": { - "description": "list of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'Ipsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigurations": { - "description": "list of all P2SVpnServerConfigurations associated with the virtual wan.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "list of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations_childResource": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-10-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2018-11-01/Microsoft.Network.NRP.json b/schemas/2018-11-01/Microsoft.Network.NRP.json deleted file mode 100644 index d90f970fcc..0000000000 --- a/schemas/2018-11-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,13380 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCrossConnection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "ExpressRoute gateway resource properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "interfaceEndpoints": { - "description": "Microsoft.Network/interfaceEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the interface endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the interface endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/InterfaceEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/interfaceEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualWAN", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualWans_p2sVpnServerConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnSite", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "the probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of application the gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of rewrite rule set of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Trusted Root certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the trusted root certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "maximum": 500, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "Container": { - "description": "Reference to container resource in remote resource provider.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterface": { - "description": "Container network interface child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfiguration": { - "description": "The ip configuration for a container network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the container network interface IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of the container network interface IP configuration.", - "properties": {}, - "type": "object" - }, - "ContainerNetworkInterfacePropertiesFormat": { - "properties": { - "container": { - "description": "Reference to the container to which this container network interface is attached.", - "oneOf": [ - { - "$ref": "#/definitions/Container" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration from which this container network interface is created.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Reference to the ip configuration on this container nic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "EndpointService": { - "description": "Identifies the service being brought into the virtual network.", - "properties": { - "id": { - "description": "A unique identifier of the service being referenced by the interface endpoint.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGlobalReach": { - "description": "Flag to enable Global Reach on the circuit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard', 'Premium' or 'Basic'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the ExpressRoutePort resource.", - "type": "string" - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for HubVirtualNetworkConnection", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference of the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "InterfaceEndpointProperties": { - "description": "Properties of the interface endpoint.", - "properties": { - "endpointService": { - "description": "A reference to the service being brought into the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/EndpointService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "A first-party service's FQDN that is mapped to the private IP allocated via this interface endpoint.", - "type": "string" - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "tapConfigurations": { - "description": "A list of TapConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterfaceTapConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfiguration": { - "description": "Tap configuration in a Network Interface", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference of the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaces": { - "description": "List of child container network interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol - TCP, UDP or All", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway", - "properties": { - "p2SVpnServerConfiguration": { - "description": "The P2SVpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificate": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Radius client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat": { - "description": "Properties of the Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificate": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration Radius Server root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat": { - "description": "Properties of Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificate": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration VPN client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat": { - "description": "Properties of VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfiguration": { - "description": "P2SVpnServerConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigurationProperties": { - "description": "Parameters for P2SVpnServerConfiguration", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration that is unique within a VirtualWan in a resource group. This name can be used to access the resource along with Paren VirtualWan resource name.", - "type": "string" - }, - "p2SVpnServerConfigRadiusClientRootCertificates": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigRadiusServerRootCertificates": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRootCertificates": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "vpnProtocols for the P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http', 'Tcp', or 'Https'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipPrefix": { - "description": "The allocated Prefix", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the Public IP prefix resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddresses": { - "description": "The list of all referenced PublicIPAddresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP prefix resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ReferencedPublicIpAddress": { - "properties": { - "id": { - "description": "The PublicIPAddress Reference", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisks '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisks '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisks '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisks '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceAssociationLink": { - "description": "ServiceAssociationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceAssociationLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceAssociationLinkPropertiesFormat": { - "description": "Properties of ServiceAssociationLink.", - "properties": { - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "actions": { - "description": "Describes the actions permitted to the service upon delegation", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "Gets an array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAssociationLinks": { - "description": "Gets an array of references to services injecting into this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceAssociationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "list of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route", - "properties": { - "addressPrefixes": { - "description": "list of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table", - "properties": { - "routes": { - "description": "list of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'Ipsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigurations": { - "description": "list of all P2SVpnServerConfigurations associated with the virtual wan.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "list of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations_childResource": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2018-12-01/Microsoft.Network.NRP.json b/schemas/2018-12-01/Microsoft.Network.NRP.json deleted file mode 100644 index ae13288705..0000000000 --- a/schemas/2018-12-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,13817 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of ExpressRouteCrossConnection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "ExpressRoute gateway resource properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "interfaceEndpoints": { - "description": "Microsoft.Network/interfaceEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the interface endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the interface endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/InterfaceEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/interfaceEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "The network watcher properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VirtualWAN", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualWans_p2sVpnServerConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnGateway", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnSite", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Authentication certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend Address Pool of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Backend address pool settings of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "PrivateIP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway", - "type": "string" - }, - "properties": { - "description": "Properties of Frontend port of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of HTTP listener of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of path rule of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of probe of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe. Possible values are 'Http' and 'Https'.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference of the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of redirect configuration of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "Supported http redirection types - Permanent, Temporary, Found, SeeOther.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of request routing rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of rewrite rule set of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of SSL certificates of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Trusted Root certificates properties of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the trusted root certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of UrlPathMap of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "maximum": 500, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of IP configuration of an Azure Firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny", - "Alert" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "Container": { - "description": "Reference to container resource in remote resource provider.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterface": { - "description": "Container network interface child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfiguration": { - "description": "The ip configuration for a container network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the container network interface IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of the container network interface IP configuration.", - "properties": {}, - "type": "object" - }, - "ContainerNetworkInterfacePropertiesFormat": { - "properties": { - "container": { - "description": "Reference to the container to which this container network interface is attached.", - "oneOf": [ - { - "$ref": "#/definitions/Container" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration from which this container network interface is created.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Reference to the ip configuration on this container nic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "EndpointService": { - "description": "Identifies the service being brought into the virtual network.", - "properties": { - "id": { - "description": "A unique identifier of the service being referenced by the interface endpoint.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGlobalReach": { - "description": "Flag to enable Global Reach on the circuit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting Global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned', and 'Deprovisioning'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard', 'Premium' or 'Local'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system. Possible values are 'NotProvisioned', 'Provisioning', 'Provisioned'.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the ExpressRoutePort resource.", - "type": "string" - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for HubVirtualNetworkConnection", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference of the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "InterfaceEndpointProperties": { - "description": "Properties of the interface endpoint.", - "properties": { - "endpointService": { - "description": "A reference to the service being brought into the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/EndpointService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "A first-party service's FQDN that is mapped to the private IP allocated via this interface endpoint.", - "type": "string" - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Groups used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Groups used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The transport protocol for the endpoint. Possible values are 'Udp' or 'Tcp' or 'All'.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions", - "properties": { - "matchValues": { - "description": "Match value", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Describes if this is negate condition or not", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "Describes operator to be matched", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables", - "properties": { - "selector": { - "description": "Describes field of the matchVariable collection", - "type": "string" - }, - "variableName": { - "description": "Match Variable", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "Defines how a private IP address is assigned. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "tapConfigurations": { - "description": "A list of TapConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterfaceTapConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfiguration": { - "description": "Tap configuration in a Network Interface", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference of the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaces": { - "description": "List of child container network interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol - TCP, UDP or All", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway", - "properties": { - "p2SVpnServerConfiguration": { - "description": "The P2SVpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificate": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Radius client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat": { - "description": "Properties of the Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificate": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration Radius Server root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat": { - "description": "Properties of Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificate": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration VPN client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat": { - "description": "Properties of VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfiguration": { - "description": "P2SVpnServerConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigurationProperties": { - "description": "Parameters for P2SVpnServerConfiguration", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration that is unique within a VirtualWan in a resource group. This name can be used to access the resource along with Paren VirtualWan resource name.", - "type": "string" - }, - "p2SVpnServerConfigRadiusClientRootCertificates": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigRadiusServerRootCertificates": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRootCertificates": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration", - "properties": { - "enabledState": { - "description": "Describes if the policy is in enabled state or disabled state", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Describes if it is in detection mode or prevention mode at policy level", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http', 'Tcp', or 'Https'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipPrefix": { - "description": "The allocated Prefix", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the Public IP prefix resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version. Possible values are: 'IPv4' and 'IPv6'.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddresses": { - "description": "The list of all referenced PublicIPAddresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP prefix resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ReferencedPublicIpAddress": { - "properties": { - "id": { - "description": "The PublicIPAddress Reference", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Route Filter Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule. Valid values are: 'Allow', 'Deny'", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied. Possible values are: 'Allow' and 'Deny'.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are: 'Inbound' and 'Outbound'.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceAssociationLink": { - "description": "ServiceAssociationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceAssociationLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceAssociationLinkPropertiesFormat": { - "description": "Properties of ServiceAssociationLink.", - "properties": { - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "actions": { - "description": "Describes the actions permitted to the service upon delegation", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "Gets an array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAssociationLinks": { - "description": "Gets an array of references to services injecting into this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceAssociationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type. Possible values are: 'Ipsec','Vnet2Vnet','ExpressRoute', and 'VPNClient.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP allocation method. Possible values are: 'Static' and 'Dynamic'.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the remote virtual network will be allowed/disallowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the linked virtual network space would be able to access all the VMs in local Virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigurations": { - "description": "List of all P2SVpnServerConfigurations associated with the virtual wan.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "oneOf": [ - { - "enum": [ - "Succeeded", - "Updating", - "Deleting", - "Failed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule", - "properties": { - "action": { - "description": "Type of Actions", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gets name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Describes type of rule", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties", - "properties": { - "customRules": { - "description": "Describes custom rules inside the policy", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "Describes policySettings for policy", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the operation to create a connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Parameters that define the create packet capture operation.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Route Filter Rule Resource", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations_childResource": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Parameters for P2SVpnServerConfiguration", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2018-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Parameters for VpnConnection", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2019-02-01/Microsoft.Network.NRP.json b/schemas/2019-02-01/Microsoft.Network.NRP.json deleted file mode 100644 index 05c22e4e1f..0000000000 --- a/schemas/2019-02-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,13803 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "interfaceEndpoints": { - "description": "Microsoft.Network/interfaceEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the interface endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the interface endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/InterfaceEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/interfaceEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualWans_p2sVpnServerConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference of the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway. ", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the trusted root certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "AuthorizationUseStatus. Possible values are: 'Available' and 'InUse'.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "Container": { - "description": "Reference to container resource in remote resource provider.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterface": { - "description": "Container network interface child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfiguration": { - "description": "The ip configuration for a container network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the container network interface IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of the container network interface IP configuration.", - "properties": {}, - "type": "object" - }, - "ContainerNetworkInterfacePropertiesFormat": { - "description": "Properties of container network interface.", - "properties": { - "container": { - "description": "Reference to the container to which this container network interface is attached.", - "oneOf": [ - { - "$ref": "#/definitions/Container" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration from which this container network interface is created.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Reference to the ip configuration on this container nic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "EndpointService": { - "description": "Identifies the service being brought into the virtual network.", - "properties": { - "id": { - "description": "A unique identifier of the service being referenced by the interface endpoint.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "AdvertisedPublicPrefixState of the Peering resource. Possible values are 'NotConfigured', 'Configuring', 'Configured', and 'ValidationNeeded'.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting Global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU. Possible values are: 'UnlimitedData' and 'MeteredData'.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU. Possible values are 'Standard', 'Premium' or 'Local'.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the ExpressRoutePort resource.", - "type": "string" - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference of the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "InterfaceEndpointProperties": { - "description": "Properties of the interface endpoint.", - "properties": { - "endpointService": { - "description": "A reference to the service being brought into the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/EndpointService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "A first-party service's FQDN that is mapped to the private IP allocated via this interface endpoint.", - "type": "string" - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering. Possible values are: 'Disabled' and 'Enabled'", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning ", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\"", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions", - "properties": { - "matchValues": { - "description": "Match value", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Describes if this is negate condition or not", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "Describes operator to be matched", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables", - "properties": { - "selector": { - "description": "Describes field of the matchVariable collection", - "type": "string" - }, - "variableName": { - "description": "Match Variable", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the NatGateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the nat gateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties. ", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "tapConfigurations": { - "description": "A list of TapConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterfaceTapConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfiguration": { - "description": "Tap configuration in a Network Interface", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference of the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaces": { - "description": "List of child container network interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer. Possible values are: 'Tcp', 'Udp', and 'All'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway", - "properties": { - "customRoutes": { - "description": "The reference of the address space resource which represents the custom routes specified by the customer for P2SVpnGateway and P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfiguration": { - "description": "The P2SVpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificate": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Radius client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat": { - "description": "Properties of the Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificate": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration Radius Server root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat": { - "description": "Properties of Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificate": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration VPN client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat": { - "description": "Properties of VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfiguration": { - "description": "P2SVpnServerConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigurationProperties": { - "description": "Parameters for P2SVpnServerConfiguration", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration that is unique within a VirtualWan in a resource group. This name can be used to access the resource along with Paren VirtualWan resource name.", - "type": "string" - }, - "p2SVpnServerConfigRadiusClientRootCertificates": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigRadiusServerRootCertificates": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRootCertificates": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration", - "properties": { - "enabledState": { - "description": "Describes if the policy is in enabled state or disabled state", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Describes if it is in detection mode or prevention mode at policy level", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. Possible values are: 'Http', 'Tcp', or 'Https'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. ", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipPrefix": { - "description": "The allocated Prefix.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the Public IP prefix resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddresses": { - "description": "The list of all referenced PublicIPAddresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP prefix resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ReferencedPublicIpAddress": { - "description": "Reference to a public IP address.", - "properties": { - "id": { - "description": "The PublicIPAddress Reference.", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilter": { - "description": "Route Filter Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource", - "properties": { - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020']", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule. Valid value is: 'Community'", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to. Possible values are 'Tcp', 'Udp', 'Icmp', 'Esp', and '*'.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. ", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceAssociationLink": { - "description": "ServiceAssociationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceAssociationLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceAssociationLinkPropertiesFormat": { - "description": "Properties of ServiceAssociationLink.", - "properties": { - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "actions": { - "description": "Describes the actions permitted to the service upon delegation", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers)", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "Gets an array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAssociationLinks": { - "description": "Gets an array of references to services injecting into this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceAssociationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties", - "properties": { - "activeActive": { - "description": "ActiveActive flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference of the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway. Possible values are: 'Vpn' and 'ExpressRoute'.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway. Possible values are: 'PolicyBased' and 'RouteBased'.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering. Possible values are 'Initiated', 'Connected', and 'Disconnected'.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigurations": { - "description": "List of all P2SVpnServerConfigurations associated with the virtual wan.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule", - "properties": { - "action": { - "description": "Type of Actions", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gets name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Describes type of rule", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties", - "properties": { - "customRules": { - "description": "Describes custom rules inside the policy", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "Describes policySettings for policy", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations_childResource": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2019-04-01/Microsoft.Network.NRP.json b/schemas/2019-04-01/Microsoft.Network.NRP.json deleted file mode 100644 index ed58a226db..0000000000 --- a/schemas/2019-04-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,14606 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualWans_p2sVpnServerConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference of the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the trusted root certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "Container": { - "description": "Reference to container resource in remote resource provider.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterface": { - "description": "Container network interface child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfiguration": { - "description": "The ip configuration for a container network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the container network interface IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of the container network interface IP configuration.", - "properties": {}, - "type": "object" - }, - "ContainerNetworkInterfacePropertiesFormat": { - "description": "Properties of container network interface.", - "properties": { - "container": { - "description": "Reference to the container to which this container network interface is attached.", - "oneOf": [ - { - "$ref": "#/definitions/Container" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration from which this container network interface is created.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Reference to the ip configuration on this container nic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "The advertised public prefix state of the Peering resource.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting Global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the ExpressRoutePort resource.", - "type": "string" - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "It represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference of the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Describes if this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "Describes operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "Describes field of the matchVariable collection.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the NatGateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the nat gateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "tapConfigurations": { - "description": "A list of TapConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterfaceTapConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfiguration": { - "description": "Tap configuration in a Network Interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference of the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaces": { - "description": "List of child container network interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customRoutes": { - "description": "The reference of the address space resource which represents the custom routes specified by the customer for P2SVpnGateway and P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfiguration": { - "description": "The P2SVpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificate": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Radius client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat": { - "description": "Properties of the Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificate": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration Radius Server root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat": { - "description": "Properties of Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificate": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration VPN client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat": { - "description": "Properties of VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfiguration": { - "description": "P2SVpnServerConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigurationProperties": { - "description": "Parameters for P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration that is unique within a VirtualWan in a resource group. This name can be used to access the resource along with Paren VirtualWan resource name.", - "type": "string" - }, - "p2SVpnServerConfigRadiusClientRootCertificates": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigRadiusServerRootCertificates": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRootCertificates": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "enabledState": { - "description": "Describes if the policy is in enabled state or disabled state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Describes if it is in detection mode or prevention mode at policy level.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpoint": { - "description": "Private endpoint resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnection": { - "description": "PrivateEndpointConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateEndpoint": { - "description": "The resource of private end point.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpoint" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of references to the private link service IP configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointConnections": { - "description": "An array of list about connections to the private endpoint.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipPrefix": { - "description": "The allocated Prefix.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the Public IP prefix resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddresses": { - "description": "The list of all referenced PublicIPAddresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP prefix resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ReferencedPublicIpAddress": { - "description": "Reference to a public IP address.", - "properties": { - "id": { - "description": "The PublicIPAddress Reference.", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "ipv6Peerings": { - "description": "A collection of references to express route circuit ipv6 peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceAssociationLink": { - "description": "ServiceAssociationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceAssociationLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceAssociationLinkPropertiesFormat": { - "description": "Properties of ServiceAssociationLink.", - "properties": { - "allowDelete": { - "description": "If true, the resource can be deleted.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - }, - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "actions": { - "description": "Describes the actions permitted to the service upon delegation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "Gets an array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable private end point on the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable private link service on the subnet.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAssociationLinks": { - "description": "Gets an array of references to services injecting into this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceAssociationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference of the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigurations": { - "description": "List of all P2SVpnServerConfigurations associated with the virtual wan.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gets name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Describes type of rule.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "Describes custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "Describes policySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations_childResource": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2019-06-01/Microsoft.Network.NRP.json b/schemas/2019-06-01/Microsoft.Network.NRP.json deleted file mode 100644 index 6b47836deb..0000000000 --- a/schemas/2019-06-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,15449 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualWans_p2sVpnServerConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the authentication certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend address pool resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the frontend port resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the HTTP listener resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "provisioningState": { - "description": "Provisioning state of the application gateway subnet resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Path rule of URL path map resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference of the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the application gateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "Resource GUID property of the application gateway resource.", - "type": "string" - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the request routing rule resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the SSL certificate resource Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "provisioningState": { - "description": "Provisioning state of the trusted root certificate resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Provisioning state of the backend http settings resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "provisioningState": { - "description": "Get provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "Container": { - "description": "Reference to container resource in remote resource provider.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterface": { - "description": "Container network interface child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfiguration": { - "description": "The ip configuration for a container network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the container network interface IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of the container network interface IP configuration.", - "properties": {}, - "type": "object" - }, - "ContainerNetworkInterfacePropertiesFormat": { - "description": "Properties of container network interface.", - "properties": { - "container": { - "description": "Reference to the container to which this container network interface is attached.", - "oneOf": [ - { - "$ref": "#/definitions/Container" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration from which this container network interface is created.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Reference to the ip configuration on this container nic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "The advertised public prefix state of the Peering resource.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "Gets peering stats.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting Global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "Gets BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "Gets BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Gets whether the provider or the customer last modified the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the ExpressRoutePort resource.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleAction": { - "description": "Properties of the FirewallPolicyFilterRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny", - "Alert " - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleAction": { - "description": "Properties of the FirewallPolicyNatRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT", - "SNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of the rule.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule", - "properties": { - "action": { - "description": "The action type of a Filter rule", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleConditions": { - "description": "Collection of rule conditions used by a rule.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule", - "properties": { - "action": { - "description": "The action type of a Nat rule, SNAT or DNAT", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCondition": { - "description": "The match conditions for incoming traffic", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "Name of the Rule", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCondition": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule condition of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type network", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule condition.", - "type": "string" - }, - "name": { - "description": "Name of the rule condition.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleConditionApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleGroupProperties": { - "description": "Properties of the rule group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Group of Firewall Policy rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "It represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference of the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "Gets or sets the ipTag type: Example FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "Gets or sets value of the IpTag associated with the public IP. Example SQL, Storage etc.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the LocalNetworkGateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Describes if this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "Describes operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "Describes field of the matchVariable collection.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the NatGateway resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the nat gateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the network interface IP configuration. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Gets whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "tapConfigurations": { - "description": "A list of TapConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterfaceTapConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfiguration": { - "description": "Tap configuration in a Network Interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference of the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaces": { - "description": "List of child container network interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customRoutes": { - "description": "The reference of the address space resource which represents the custom routes specified by the customer for P2SVpnGateway and P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfiguration": { - "description": "The P2SVpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificate": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Radius client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat": { - "description": "Properties of the Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificate": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration Radius Server root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat": { - "description": "Properties of Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificate": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration VPN client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat": { - "description": "Properties of VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfiguration": { - "description": "P2SVpnServerConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigurationProperties": { - "description": "Parameters for P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration that is unique within a VirtualWan in a resource group. This name can be used to access the resource along with Paren VirtualWan resource name.", - "type": "string" - }, - "p2SVpnServerConfigRadiusClientRootCertificates": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigRadiusServerRootCertificates": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRootCertificates": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "enabledState": { - "description": "Describes if the policy is in enabled state or disabled state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Describes if it is in detection mode or prevention mode at policy level.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpoint": { - "description": "Private endpoint resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnection": { - "description": "PrivateEndpointConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateEndpoint": { - "description": "The resource of private end point.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpoint" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Available from Api-Version 2016-03-30 onwards, it represents whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of references to the private link service IP configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointConnections": { - "description": "An array of list about connections to the private endpoint.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Gets name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "Gets the provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "Gets or sets the Domain name label.The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "Gets the FQDN, Fully qualified domain name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "Gets or Sets the Reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipPrefix": { - "description": "The allocated Prefix.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the Public IP prefix resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddresses": { - "description": "The list of all referenced PublicIPAddresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP prefix resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ReferencedPublicIpAddress": { - "description": "Reference to a public IP address.", - "properties": { - "id": { - "description": "The PublicIPAddress Reference.", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "ipv6Peerings": { - "description": "A collection of references to express route circuit ipv6 peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Gets or sets whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the public IP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceAssociationLink": { - "description": "ServiceAssociationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceAssociationLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceAssociationLinkPropertiesFormat": { - "description": "Properties of ServiceAssociationLink.", - "properties": { - "allowDelete": { - "description": "If true, the resource can be deleted.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - }, - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "actions": { - "description": "Describes the actions permitted to the service upon delegation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "Gets an array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "type": "string" - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "Gets an array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAssociationLinks": { - "description": "Gets an array of references to services injecting into this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceAssociationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGatewayConnection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference of the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the VirtualNetworkGateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the resource.", - "type": "string" - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "provisioningState": { - "description": "The provisioning state of the PublicIP resource. Possible values are: 'Updating', 'Deleting', and 'Failed'.", - "type": "string" - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "etag": { - "description": "Gets a unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigurations": { - "description": "List of all P2SVpnServerConfigurations associated with the virtual wan.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gets name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Describes type of rule.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "Describes custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "Describes policySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations_childResource": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2019-07-01/Microsoft.Network.NRP.json b/schemas/2019-07-01/Microsoft.Network.NRP.json deleted file mode 100644 index 4654aee558..0000000000 --- a/schemas/2019-07-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,15673 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualWans_p2sVpnServerConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans/p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference of the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the application gateway resource.", - "type": "string" - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": {}, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "Container": { - "description": "Reference to container resource in remote resource provider.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterface": { - "description": "Container network interface child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfiguration": { - "description": "The ip configuration for a container network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the container network interface IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of the container network interface IP configuration.", - "properties": {}, - "type": "object" - }, - "ContainerNetworkInterfacePropertiesFormat": { - "description": "Properties of container network interface.", - "properties": { - "container": { - "description": "Reference to the container to which this container network interface is attached.", - "oneOf": [ - { - "$ref": "#/definitions/Container" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration from which this container network interface is created.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Reference to the ip configuration on this container nic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "The advertised public prefix state of the Peering resource.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Who was the last to modify the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting Global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Who was the last to modify the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "gcm-aes-128", - "gcm-aes-256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the express route port resource.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleAction": { - "description": "Properties of the FirewallPolicyFilterRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny", - "Alert " - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleAction": { - "description": "Properties of the FirewallPolicyNatRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT", - "SNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of the rule.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule.", - "properties": { - "action": { - "description": "The action type of a Filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleConditions": { - "description": "Collection of rule conditions used by a rule.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule.", - "properties": { - "action": { - "description": "The action type of a Nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCondition": { - "description": "The match conditions for incoming traffic.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCondition": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule condition of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule condition.", - "type": "string" - }, - "name": { - "description": "Name of the rule condition.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleConditionApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleGroupProperties": { - "description": "Properties of the rule group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Group of Firewall Policy rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference of the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the local network gateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Describes if this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "Describes operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "Describes field of the matchVariable collection.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the NAT gateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "tapConfigurations": { - "description": "A list of TapConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterfaceTapConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfiguration": { - "description": "Tap configuration in a Network Interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference of the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaces": { - "description": "List of child container network interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customRoutes": { - "description": "The reference of the address space resource which represents the custom routes specified by the customer for P2SVpnGateway and P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfiguration": { - "description": "The P2SVpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificate": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Radius client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusClientRootCertificatePropertiesFormat": { - "description": "Properties of the Radius client root certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificate": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration Radius Server root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigRadiusServerRootCertificatePropertiesFormat": { - "description": "Properties of Radius Server root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of P2SVpnServerConfiguration.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificate": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServerConfiguration VPN client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "P2SVpnServerConfigVpnClientRootCertificatePropertiesFormat": { - "description": "Properties of VPN client root certificate of P2SVpnServerConfiguration.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "P2SVpnServerConfiguration": { - "description": "P2SVpnServerConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnServerConfigurationProperties": { - "description": "Parameters for P2SVpnServerConfiguration.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration that is unique within a VirtualWan in a resource group. This name can be used to access the resource along with Paren VirtualWan resource name.", - "type": "string" - }, - "p2SVpnServerConfigRadiusClientRootCertificates": { - "description": "Radius client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigRadiusServerRootCertificates": { - "description": "Radius Server root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigVpnClientRootCertificates": { - "description": "VPN client root certificate of P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the P2SVpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the P2SVpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "enabledState": { - "description": "Describes if the policy is in enabled state or disabled state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Describes if it is in detection mode or prevention mode at policy level.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpoint": { - "description": "Private endpoint resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnection": { - "description": "PrivateEndpointConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateEndpoint": { - "description": "The resource of private end point.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpoint" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointConnections": { - "description": "An array of list about connections to the private endpoint.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP address resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipPrefix": { - "description": "The allocated Prefix.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddresses": { - "description": "The list of all referenced PublicIPAddresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP prefix resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ReferencedPublicIpAddress": { - "description": "Reference to a public IP address.", - "properties": { - "id": { - "description": "The PublicIPAddress Reference.", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "ipv6Peerings": { - "description": "A collection of references to express route circuit ipv6 peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceAssociationLink": { - "description": "ServiceAssociationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceAssociationLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceAssociationLinkPropertiesFormat": { - "description": "Properties of ServiceAssociationLink.", - "properties": { - "allowDelete": { - "description": "If true, the resource can be deleted.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - }, - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "actions": { - "description": "Describes the actions permitted to the service upon delegation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "An array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAssociationLinks": { - "description": "An array of references to services injecting into this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceAssociationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the virtual network gateway connection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference of the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the virtual network gateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnServerConfigurations": { - "description": "List of all P2SVpnServerConfigurations associated with the virtual wan.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SVpnServerConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Describes type of rule.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "Describes custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "Describes policySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans_p2sVpnServerConfigurations_childResource": { - "description": "Microsoft.Network/virtualWans/p2sVpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the P2SVpnServerConfiguration.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "p2sVpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2019-08-01/Microsoft.Network.NRP.json b/schemas/2019-08-01/Microsoft.Network.NRP.json deleted file mode 100644 index 00a99be2c1..0000000000 --- a/schemas/2019-08-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,15883 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendIPConfigurations": { - "description": "Collection of references to IPs defined in network interfaces.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference of the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the application gateway resource.", - "type": "string" - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - }, - "publicCertData": { - "description": "Base-64 encoded Public cert data corresponding to pfx specified in data. Only applicable in GET request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": {}, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "Container": { - "description": "Reference to container resource in remote resource provider.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterface": { - "description": "Container network interface child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfiguration": { - "description": "The ip configuration for a container network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the container network interface IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceIpConfigurationPropertiesFormat": { - "description": "Properties of the container network interface IP configuration.", - "properties": {}, - "type": "object" - }, - "ContainerNetworkInterfacePropertiesFormat": { - "description": "Properties of container network interface.", - "properties": { - "container": { - "description": "Reference to the container to which this container network interface is attached.", - "oneOf": [ - { - "$ref": "#/definitions/Container" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration from which this container network interface is created.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "Reference to the ip configuration on this container nic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixesState": { - "description": "The advertised public prefix state of the Peering resource.", - "oneOf": [ - { - "enum": [ - "NotConfigured", - "Configuring", - "Configured", - "ValidationNeeded" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Who was the last to modify the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting Global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "lastModifiedBy": { - "description": "Who was the last to modify the peering.", - "type": "string" - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "gcm-aes-128", - "gcm-aes-256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - }, - "resourceGuid": { - "description": "The resource GUID property of the express route port resource.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleAction": { - "description": "Properties of the FirewallPolicyFilterRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleAction": { - "description": "Properties of the FirewallPolicyNatRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of the rule.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule.", - "properties": { - "action": { - "description": "The action type of a Filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleConditions": { - "description": "Collection of rule conditions used by a rule.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule.", - "properties": { - "action": { - "description": "The action type of a Nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCondition": { - "description": "The match conditions for incoming traffic.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCondition": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule condition of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule condition.", - "type": "string" - }, - "name": { - "description": "Name of the rule condition.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleConditionApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleGroupProperties": { - "description": "Properties of the rule group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Group of Firewall Policy rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference of the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the load balancer resource.", - "type": "string" - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the local network gateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "Describes the managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "Describes the state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "Describes the Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "Describes the ruleSets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Describes if this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "Describes operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "Describes field of the matchVariable collection.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the NAT gateway resource.", - "type": "string" - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "appliedDnsServers": { - "description": "If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - }, - "internalDomainNameSuffix": { - "description": "Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.", - "type": "string" - }, - "internalFqdn": { - "description": "Fully qualified DNS name supporting internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macAddress": { - "description": "The MAC address of the network interface.", - "type": "string" - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary network interface on a virtual machine.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the network interface resource.", - "type": "string" - }, - "tapConfigurations": { - "description": "A list of TapConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkInterfaceTapConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfiguration": { - "description": "Tap configuration in a Network Interface.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference of the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "containerNetworkInterfaces": { - "description": "List of child container network interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "defaultSecurityRules": { - "description": "The default security rules of network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the network security group resource.", - "type": "string" - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Describes if it is in detection mode or prevention mode at policy level.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Describes if the policy is in enabled state or disabled state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpoint": { - "description": "Private endpoint resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnection": { - "description": "PrivateEndpointConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateEndpoint": { - "description": "The resource of private end point.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpoint" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointConnections": { - "description": "An array of list about connections to the private endpoint.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP address resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipPrefix": { - "description": "The allocated Prefix.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddresses": { - "description": "The list of all referenced PublicIPAddresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ReferencedPublicIpAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the public IP prefix resource.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ReferencedPublicIpAddress": { - "description": "Reference to a public IP address.", - "properties": { - "id": { - "description": "The PublicIPAddress Reference.", - "type": "string" - } - }, - "type": "object" - }, - "ResourceNavigationLink": { - "description": "ResourceNavigationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ResourceNavigationLinkFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ResourceNavigationLinkFormat": { - "description": "Properties of ResourceNavigationLink.", - "properties": { - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "ipv6Peerings": { - "description": "A collection of references to express route circuit ipv6 peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "A collection of references to express route circuit peerings.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceAssociationLink": { - "description": "ServiceAssociationLink resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Resource navigation link properties format.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceAssociationLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceAssociationLinkPropertiesFormat": { - "description": "Properties of ServiceAssociationLink.", - "properties": { - "allowDelete": { - "description": "If true, the resource can be deleted.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "link": { - "description": "Link to the external resource.", - "type": "string" - }, - "linkedResourceType": { - "description": "Resource type of the linked resource.", - "type": "string" - }, - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "actions": { - "description": "Describes the actions permitted to the service upon delegation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "type": "string" - }, - "resourceNavigationLinks": { - "description": "An array of references to the external resources using subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ResourceNavigationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAssociationLinks": { - "description": "An array of references to services injecting into this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceAssociationLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the virtual network gateway connection resource.", - "type": "string" - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference of the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource GUID property of the virtual network gateway resource.", - "type": "string" - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "capacity": { - "description": "The capacity.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resourceGuid property of the Virtual Network resource.", - "type": "string" - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Describes type of rule.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "Describes custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "Describes policySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "etag": { - "description": "A unique read-only string that changes whenever the resource is updated.", - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2019-08-01/managementGroupDeploymentTemplate.json b/schemas/2019-08-01/managementGroupDeploymentTemplate.json index 53673fb265..9375498d0d 100644 --- a/schemas/2019-08-01/managementGroupDeploymentTemplate.json +++ b/schemas/2019-08-01/managementGroupDeploymentTemplate.json @@ -860,45 +860,6 @@ { "$ref": "https://schema.management.azure.com/schemas/2023-05-01-preview/Microsoft.Insights.json#/managementGroup_resourceDefinitions/tenantActionGroups" }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/managementGroup_resourceDefinitions/networkManagerConnections" - }, { "$ref": "https://schema.management.azure.com/schemas/2018-07-01-preview/Microsoft.PolicyInsights.json#/unknown_resourceDefinitions/remediations" }, diff --git a/schemas/2019-08-01/tenantDeploymentTemplate.json b/schemas/2019-08-01/tenantDeploymentTemplate.json index e6f90fdf08..04fc3e586c 100644 --- a/schemas/2019-08-01/tenantDeploymentTemplate.json +++ b/schemas/2019-08-01/tenantDeploymentTemplate.json @@ -940,9 +940,6 @@ { "$ref": "https://schema.management.azure.com/schemas/2023-01-01/Microsoft.Marketplace.json#/tenant_resourceDefinitions/privateStores_requestApprovals" }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/tenant_resourceDefinitions/managementGroups_networkManagerConnections" - }, { "$ref": "https://schema.management.azure.com/schemas/2019-01-01-preview/Microsoft.Portal.json#/tenant_resourceDefinitions/tenantConfigurations" }, diff --git a/schemas/2019-09-01/Microsoft.Network.NRP.json b/schemas/2019-09-01/Microsoft.Network.NRP.json deleted file mode 100644 index 50dd84cc51..0000000000 --- a/schemas/2019-09-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,15360 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostnames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference of the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference of the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference of the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource. This resource must be named 'AzureFirewallSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": {}, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "source", - "destination" - ], - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference of AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting Global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "gcm-aes-128", - "gcm-aes-256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleAction": { - "description": "Properties of the FirewallPolicyFilterRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleAction": { - "description": "Properties of the FirewallPolicyNatRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of the rule.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule.", - "properties": { - "action": { - "description": "The action type of a Filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleConditions": { - "description": "Collection of rule conditions used by a rule.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule.", - "properties": { - "action": { - "description": "The action type of a Nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCondition": { - "description": "The match conditions for incoming traffic.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCondition": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule condition of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule condition.", - "type": "string" - }, - "name": { - "description": "Name of the rule condition.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleConditionApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleGroupProperties": { - "description": "Properties of the rule group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Group of Firewall Policy rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference of the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference of the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference of the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference of the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "Describes the managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "Describes the state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "Describes the Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "Describes the ruleSets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Describes if this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "Describes operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "Describes field of the matchVariable collection.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference of ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference of LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference of the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "Describes the storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "Describes the storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Describes if it is in detection mode or prevention mode at policy level.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Describes if the policy is in enabled state or disabled state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference of the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "type": "string" - }, - "routeTable": { - "description": "The reference of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference of the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference of the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference of the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference of the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference of the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference of the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference of the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference of the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Describes type of rule.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "Describes custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "Describes policySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2019-11-01/Microsoft.Network.NRP.json b/schemas/2019-11-01/Microsoft.Network.NRP.json deleted file mode 100644 index 2039839d4b..0000000000 --- a/schemas/2019-11-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,16241 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": {}, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting Global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "gcm-aes-128", - "gcm-aes-256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleAction": { - "description": "Properties of the FirewallPolicyFilterRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleAction": { - "description": "Properties of the FirewallPolicyNatRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of the rule.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule.", - "properties": { - "action": { - "description": "The action type of a Filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleConditions": { - "description": "Collection of rule conditions used by a rule.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule.", - "properties": { - "action": { - "description": "The action type of a Nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCondition": { - "description": "The match conditions for incoming traffic.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCondition": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule condition of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule condition.", - "type": "string" - }, - "name": { - "description": "Name of the rule condition.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleConditionApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleGroupProperties": { - "description": "Properties of the rule group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Group of Firewall Policy rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "type": "string" - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2019-12-01/Microsoft.Network.NRP.json b/schemas/2019-12-01/Microsoft.Network.NRP.json deleted file mode 100644 index 38eb21e703..0000000000 --- a/schemas/2019-12-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,16616 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": {}, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "gcm-aes-128", - "gcm-aes-256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleAction": { - "description": "Properties of the FirewallPolicyFilterRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleAction": { - "description": "Properties of the FirewallPolicyNatRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of the rule.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule.", - "properties": { - "action": { - "description": "The action type of a Filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleConditions": { - "description": "Collection of rule conditions used by a rule.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule.", - "properties": { - "action": { - "description": "The action type of a Nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCondition": { - "description": "The match conditions for incoming traffic.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCondition": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule condition of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule condition.", - "type": "string" - }, - "name": { - "description": "Name of the rule condition.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleConditionApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleGroupProperties": { - "description": "Properties of the rule group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Group of Firewall Policy rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlob": { - "description": "BootStrapConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfigurationBlob": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "type": "string" - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2019-12-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2020-03-01/Microsoft.Network.NRP.json b/schemas/2020-03-01/Microsoft.Network.NRP.json deleted file mode 100644 index 1aa0abaef7..0000000000 --- a/schemas/2020-03-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,17156 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": {}, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "gcm-aes-128", - "gcm-aes-256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleAction": { - "description": "Properties of the FirewallPolicyFilterRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleAction": { - "description": "Properties of the FirewallPolicyNatRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of the rule.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule.", - "properties": { - "action": { - "description": "The action type of a Filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleConditions": { - "description": "Collection of rule conditions used by a rule.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule.", - "properties": { - "action": { - "description": "The action type of a Nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCondition": { - "description": "The match conditions for incoming traffic.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCondition": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule condition of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule condition.", - "type": "string" - }, - "name": { - "description": "Name of the rule condition.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleConditionApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleGroupProperties": { - "description": "Properties of the rule group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Group of Firewall Policy rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlob": { - "description": "BootStrapConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfigurationBlob": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "type": "string" - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout for a vpn connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2020-04-01/Microsoft.Network.NRP.json b/schemas/2020-04-01/Microsoft.Network.NRP.json deleted file mode 100644 index 25496caac8..0000000000 --- a/schemas/2020-04-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,17681 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "gcm-aes-128", - "gcm-aes-256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleAction": { - "description": "Properties of the FirewallPolicyFilterRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleAction": { - "description": "Properties of the FirewallPolicyNatRuleAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of the rule.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule.", - "properties": { - "action": { - "description": "The action type of a Filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleConditions": { - "description": "Collection of rule conditions used by a rule.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule.", - "properties": { - "action": { - "description": "The action type of a Nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCondition": { - "description": "The match conditions for incoming traffic.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCondition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCondition": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule condition of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleConditionApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule condition of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleConditionNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule condition.", - "type": "string" - }, - "name": { - "description": "Name of the rule condition.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleConditionApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleGroupProperties": { - "description": "Properties of the rule group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Group of Firewall Policy rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnection": { - "description": "HubVirtualNetworkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlob": { - "description": "BootStrapConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfigurationBlob": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "type": "string" - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkConnections": { - "description": "List of all vnet connections with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubVirtualNetworkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout for a vpn connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2020-05-01/Microsoft.Network.NRP.json b/schemas/2020-05-01/Microsoft.Network.NRP.json deleted file mode 100644 index 3d127272e1..0000000000 --- a/schemas/2020-05-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,18595 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "bandwidthInMbps": { - "description": "The circuit bandwidth In Mbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location of the ExpressRoute circuit.", - "type": "string" - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "type": "string" - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout for a vpn connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2020-06-01/Microsoft.Network.NRP.json b/schemas/2020-06-01/Microsoft.Network.NRP.json deleted file mode 100644 index e6f7a55cf7..0000000000 --- a/schemas/2020-06-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,19428 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "DSCP Configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "type": "string" - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "type": "string" - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVirtualRouterRoutePropogation": { - "description": "Flag to control route propogation for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2020-07-01/Microsoft.Network.NRP.json b/schemas/2020-07-01/Microsoft.Network.NRP.json deleted file mode 100644 index 73e062f445..0000000000 --- a/schemas/2020-07-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,20208 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "DSCP Configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type" - ], - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2020-08-01/Microsoft.Network.NRP.json b/schemas/2020-08-01/Microsoft.Network.NRP.json deleted file mode 100644 index 9ccca6e51a..0000000000 --- a/schemas/2020-08-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,20594 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "DSCP Configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type" - ], - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The source Public IP Address (IPv6) that links to this address (IPv4).", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIpConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2020-11-01/Microsoft.Network.NRP.json b/schemas/2020-11-01/Microsoft.Network.NRP.json deleted file mode 100644 index a2cb891868..0000000000 --- a/schemas/2020-11-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,20767 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "DSCP Configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "type" - ], - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIpConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the remote virtual network address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2020-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2021-02-01-preview/Microsoft.Network.NRP.json b/schemas/2021-02-01-preview/Microsoft.Network.NRP.json deleted file mode 100644 index 15895a3cd6..0000000000 --- a/schemas/2021-02-01-preview/Microsoft.Network.NRP.json +++ /dev/null @@ -1,1814 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group to get.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/RuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/RuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters": { - "description": "Microsoft.Network/networkSecurityPerimeters", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security perimeter.", - "type": "string" - }, - "properties": { - "description": "The network security perimeter properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityPerimeterProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityPerimeters_links_childResource" - }, - { - "$ref": "#/definitions/networkSecurityPerimeters_profiles_childResource" - }, - { - "$ref": "#/definitions/networkSecurityPerimeters_resourceAssociations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_links": { - "description": "Microsoft.Network/networkSecurityPerimeters/links", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the NSP link.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter link resource.", - "oneOf": [ - { - "$ref": "#/definitions/NspLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/links" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP profile.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter profile", - "oneOf": [ - { - "$ref": "#/definitions/NspProfileProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityPerimeters_profiles_accessRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/profiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles_accessRules": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles/accessRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP access rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP access rule.", - "oneOf": [ - { - "$ref": "#/definitions/NspAccessRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/profiles/accessRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_resourceAssociations": { - "description": "Microsoft.Network/networkSecurityPerimeters/resourceAssociations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP association.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP resource association.", - "oneOf": [ - { - "$ref": "#/definitions/NspAssociationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/resourceAssociations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "displayName": { - "description": "A friendly name for the resource.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GroupMembersItem": { - "description": "GroupMembers Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "conditionalMembership": { - "description": "Network group conditional filter.", - "type": "string" - }, - "description": { - "description": "A description of the network group.", - "type": "string" - }, - "displayName": { - "description": "A friendly name for the network group.", - "type": "string" - }, - "groupMembers": { - "description": "Group members of network group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupMembersItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "memberType": { - "description": "Group member type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "displayName": { - "description": "A friendly name for the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "SecurityUser", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkSecurityPerimeterProperties": { - "description": "Properties of network security perimeter.", - "properties": {}, - "type": "object" - }, - "NspAccessRuleProperties": { - "description": "Properties of NSP access rule.", - "properties": { - "addressPrefixes": { - "description": "Inbound address prefixes (IPv4/IPv6)", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "Direction that specifies whether the access rules is inbound/outbound.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "emailAddresses": { - "description": "Outbound rules email address format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fullyQualifiedDomainNames": { - "description": "Outbound rules fully qualified domain name format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "phoneNumbers": { - "description": "Outbound rules phone number format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscription ids", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubscriptionId" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NspAssociationProperties": { - "properties": { - "accessMode": { - "description": "Access mode on the association.", - "oneOf": [ - { - "enum": [ - "Learning", - "Enforced", - "Audit" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkResource": { - "description": "The PaaS resource to be associated.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "profile": { - "description": "Profile id to which the PaaS resource is associated.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NspLinkProperties": { - "description": "Properties of NSP Link resource.", - "properties": { - "autoApprovedRemotePerimeterResourceId": { - "description": "Perimeter ARM Id for the remote NSP with which the link gets created in Auto-approval mode. It should be used when the NSP admin have Microsoft.Network/networkSecurityPerimeters/linkPerimeter/action permission on the remote NSP resource.", - "type": "string" - }, - "description": { - "description": "A message passed to the owner of the remote NSP link resource with this connection request. In case of Auto-approved flow, it is default to 'Auto Approved'. Restricted to 140 chars.", - "type": "string" - }, - "localInboundProfiles": { - "description": "Local Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles. It's default value is ['*'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteInboundProfiles": { - "description": "Remote Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles. This property can only be updated in auto-approval mode. It's default value is ['*'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NspProfileProperties": { - "description": "Properties of NSP profile.", - "properties": {}, - "type": "object" - }, - "RuleCollectionPropertiesFormat": { - "description": "Defines the rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the rule collection.", - "type": "string" - }, - "displayName": { - "description": "A display name of the rule collection.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityConfigurationPropertiesFormat": { - "description": "Defines the security Configuration properties.", - "properties": { - "deleteExistingNSGs": { - "description": "Flag if need to delete existing network security groups.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - }, - "displayName": { - "description": "A display name of the security configuration.", - "type": "string" - }, - "securityType": { - "description": "Security Type.", - "oneOf": [ - { - "enum": [ - "AdminPolicy", - "UserPolicy" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "SubscriptionId": { - "properties": { - "id": { - "description": "Subscription id in the ARM id format.", - "type": "string" - } - }, - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group to get.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/RuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityUserConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/RuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_links_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/links", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the NSP link.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter link resource.", - "oneOf": [ - { - "$ref": "#/definitions/NspLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "links" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles_accessRules_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles/accessRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP access rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP access rule.", - "oneOf": [ - { - "$ref": "#/definitions/NspAccessRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "accessRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP profile.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter profile", - "oneOf": [ - { - "$ref": "#/definitions/NspProfileProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "profiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_resourceAssociations_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/resourceAssociations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP association.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP resource association.", - "oneOf": [ - { - "$ref": "#/definitions/NspAssociationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "resourceAssociations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2021-02-01/Microsoft.Network.NRP.json b/schemas/2021-02-01/Microsoft.Network.NRP.json deleted file mode 100644 index bbc0dbf554..0000000000 --- a/schemas/2021-02-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,21321 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefix": { - "description": "Custom IP prefix resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "DSCP Configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource id of private endpoint.", - "type": "string" - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - }, - "resolvedPrivateLinkServiceLocation": { - "description": "The location for the resolved private link service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceGuid": { - "description": "The resource id of private link service.", - "type": "string" - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIpConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2021-03-01-preview/Microsoft.Network.NRP.json b/schemas/2021-03-01-preview/Microsoft.Network.NRP.json deleted file mode 100644 index db4793e18a..0000000000 --- a/schemas/2021-03-01-preview/Microsoft.Network.NRP.json +++ /dev/null @@ -1,86 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2021-03-01-preview/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "networkSecurityPerimeters": { - "description": "Microsoft.Network/networkSecurityPerimeters", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security perimeter.", - "type": "string" - }, - "properties": { - "description": "The network security perimeter properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityPerimeterProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "NetworkSecurityPerimeterProperties": { - "description": "Properties of network security perimeter.", - "properties": { - "description": { - "description": "A description of the network security perimeter.", - "type": "string" - }, - "displayName": { - "description": "A friendly name for the network security perimeter.", - "type": "string" - } - }, - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2021-03-01/Microsoft.Network.NRP.json b/schemas/2021-03-01/Microsoft.Network.NRP.json deleted file mode 100644 index d8df16ba3a..0000000000 --- a/schemas/2021-03-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,21941 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefix": { - "description": "Custom IP prefix resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExplicitProxySettings": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxySettings": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIpConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-03-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2021-05-01-preview/Microsoft.Network.NRP.json b/schemas/2021-05-01-preview/Microsoft.Network.NRP.json deleted file mode 100644 index d626e45030..0000000000 --- a/schemas/2021-05-01-preview/Microsoft.Network.NRP.json +++ /dev/null @@ -1,1373 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/RuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/RuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "tenant_resourceDefinitions": { - "managementGroups_networkManagerConnections": { - "description": "Microsoft.Network/managementGroups/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/managementGroups/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "displayName": { - "description": "A friendly name for the resource.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - }, - "displayName": { - "description": "A friendly name for the network group.", - "type": "string" - }, - "memberType": { - "description": "Group member type.", - "type": "string" - } - }, - "required": [ - "memberType" - ], - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "displayName": { - "description": "A friendly name for the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "SecurityUser", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "RuleCollectionPropertiesFormat": { - "description": "Defines the rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the rule collection.", - "type": "string" - }, - "displayName": { - "description": "A display name of the rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityConfigurationPropertiesFormat": { - "description": "Defines the security Configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingNSGs": { - "description": "Flag if need to delete existing network security groups.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - }, - "displayName": { - "description": "A display name of the security configuration.", - "type": "string" - }, - "securityType": { - "description": "Security Type.", - "oneOf": [ - { - "enum": [ - "AdminPolicy", - "UserPolicy" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/RuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityUserConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/RuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2021-05-01/Microsoft.Network.NRP.json b/schemas/2021-05-01/Microsoft.Network.NRP.json deleted file mode 100644 index 6edc307837..0000000000 --- a/schemas/2021-05-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,22341 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxySettings": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxySettings": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIpConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2021-08-01/Microsoft.Network.NRP.json b/schemas/2021-08-01/Microsoft.Network.NRP.json deleted file mode 100644 index cd5a99b971..0000000000 --- a/schemas/2021-08-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,23129 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxySettings": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxySettings": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down", - "Drain" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is accelerated networking enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only VM is currently supported.", - "type": "string" - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIpConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2021-08-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2022-01-01/Microsoft.Network.NRP.json b/schemas/2022-01-01/Microsoft.Network.NRP.json deleted file mode 100644 index 15fb8ea470..0000000000 --- a/schemas/2022-01-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,24362 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "CommissionedNoInternetAdvertise" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocolCustomSettings": { - "description": "The protocol-specific DDoS policy customization parameters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ProtocolCustomSettingsFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosCustomPolicy": { - "description": "The DDoS custom policy associated with the public IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectedIP": { - "description": "Enables DDoS protection on the public IP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionCoverage": { - "description": "The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down", - "Drain" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an port range to be used by inbound NAT Pools. Inbound NAT pools are used to define a range of NAT ports to be used by a VMSS cluster. After the creation of an inbound NAT pool, individual inbound NAT rules are automatically created for every VM in a VMSS cluster. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are associated with VMSS, while inbound NAT rules are associated with individual VMs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "collection of inbound NAT Rules used by a load balancer. An inbound NAT rule is used to forward traffic from a load balancer frontend to one or more instances in the backend pool. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are associated with VMSS, while inbound NAT rules are associated with individual VMs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": { - "runningOperationIds": { - "description": "List of running operation GUIDs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProtocolCustomSettingsFormat": { - "description": "DDoS custom policy properties.", - "properties": { - "protocol": { - "description": "The protocol for which the DDoS protection policy is being customized.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Syn" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceRateOverride": { - "description": "The customized DDoS protection source rate.", - "type": "string" - }, - "triggerRateOverride": { - "description": "The customized DDoS protection trigger rate.", - "type": "string" - }, - "triggerSensitivityOverride": { - "description": "The customized DDoS protection trigger rate sensitivity degrees. High: Trigger rate set with most sensitivity w.r.t. normal traffic. Default: Trigger rate set with moderate sensitivity w.r.t. normal traffic. Low: Trigger rate set with less sensitivity w.r.t. normal traffic. Relaxed: Trigger rate set with least sensitivity w.r.t. normal traffic.", - "oneOf": [ - { - "enum": [ - "Relaxed", - "Low", - "Default", - "High" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIpConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-01-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2022-02-01-preview/Microsoft.Network.NRP.json b/schemas/2022-02-01-preview/Microsoft.Network.NRP.json deleted file mode 100644 index 36855eb82e..0000000000 --- a/schemas/2022-02-01-preview/Microsoft.Network.NRP.json +++ /dev/null @@ -1,1375 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security user configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityUserConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager user rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/UserRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - }, - "memberType": { - "description": "Group member type.", - "type": "string" - } - }, - "required": [ - "memberType" - ], - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "SecurityUser", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityUserConfigurationPropertiesFormat": { - "description": "Defines the security user configuration properties.", - "properties": { - "deleteExistingNSGs": { - "description": "Flag if need to delete existing network security groups.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security user configuration.", - "type": "string" - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "UserRuleCollectionPropertiesFormat": { - "description": "Defines the user rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the user rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security user configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityUserConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityUserConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager user rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/UserRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-02-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2022-04-01-preview/Microsoft.Network.NRP.json b/schemas/2022-04-01-preview/Microsoft.Network.NRP.json deleted file mode 100644 index ae0b7682c6..0000000000 --- a/schemas/2022-04-01-preview/Microsoft.Network.NRP.json +++ /dev/null @@ -1,1375 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security user configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityUserConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager user rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/UserRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityUserConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - }, - "memberType": { - "description": "Group member type.", - "type": "string" - } - }, - "required": [ - "memberType" - ], - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "SecurityUser", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityUserConfigurationPropertiesFormat": { - "description": "Defines the security user configuration properties.", - "properties": { - "deleteExistingNSGs": { - "description": "Flag if need to delete existing network security groups.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security user configuration.", - "type": "string" - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "UserRuleCollectionPropertiesFormat": { - "description": "Defines the user rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the user rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security user configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityUserConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityUserConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager user rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/UserRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityUserConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityUserConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-04-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2022-05-01/Microsoft.Network.NRP.json b/schemas/2022-05-01/Microsoft.Network.NRP.json deleted file mode 100644 index adb2cf5ad5..0000000000 --- a/schemas/2022-05-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,25129 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeMaps_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "extension_resourceDefinitions": { - "cloudServiceSlots": { - "description": "Microsoft.Network/cloudServiceSlots", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "swap" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Swap resource properties", - "oneOf": [ - { - "$ref": "#/definitions/SwapResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/cloudServiceSlots" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "Action": { - "description": "Action to be taken on a route matching a RouteMap criterion.", - "properties": { - "parameters": { - "description": "List of parameters relevant to the action.For instance if type is drop then parameters has list of prefixes to be dropped.If type is add, parameters would have list of ASN numbers to be added", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Parameter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of action to be taken. Supported types are 'Remove', 'Add', 'Replace', and 'Drop.'", - "oneOf": [ - { - "enum": [ - "Unknown", - "Remove", - "Add", - "Replace", - "Drop" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "verifyClientRevocation": { - "description": "Verify client certificate revocation status.", - "oneOf": [ - { - "enum": [ - "None", - "OCSP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Criterion": { - "description": "A matching criteria which matches routes based on route prefix, community, and AS path.", - "properties": { - "asPath": { - "description": "List of AS paths which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCondition": { - "description": "Match condition to apply RouteMap rules.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Contains", - "Equals", - "NotContains", - "NotEquals" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "asn": { - "description": "The ASN for CIDR advertising. Should be an integer as string.", - "type": "string" - }, - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "CommissionedNoInternetAdvertise", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "Deprovisioned" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteAdvertise": { - "description": "Whether to do express route advertise.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "geo": { - "description": "The Geo for CIDR advertising. Should be an Geo code.", - "oneOf": [ - { - "enum": [ - "GLOBAL", - "AFRI", - "APAC", - "EURO", - "LATAM", - "NAM", - "ME", - "OCEANIA", - "AQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "Type of custom IP prefix. Should be Singular, Parent, or Child.", - "oneOf": [ - { - "enum": [ - "Singular", - "Parent", - "Child" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": {}, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionMode": { - "description": "The DDoS protection mode of the public IP", - "oneOf": [ - { - "enum": [ - "VirtualNetworkInherited", - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "allowNonVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from non Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "billingType": { - "description": "The billing type of the ExpressRoutePort resource.", - "oneOf": [ - { - "enum": [ - "MeteredData", - "UnlimitedData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down", - "Drain" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "action": { - "description": "Describes the override action to be applied when rule matches.", - "oneOf": [ - { - "enum": [ - "AnomalyScoring", - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Uppercase", - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTcpStateTracking": { - "description": "Indicates whether to disable tcp state tracking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": { - "runningOperationIds": { - "description": "List of running operation GUIDs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Parameter": { - "description": "Parameters for an Action.", - "properties": { - "asPath": { - "description": "List of AS paths.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeThreshold": { - "description": "The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RouteMapProperties": { - "description": "Properties of RouteMap resource", - "properties": { - "associatedInboundConnections": { - "description": "List of connections which have this RoutMap associated for inbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "associatedOutboundConnections": { - "description": "List of connections which have this RoutMap associated for outbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of RouteMap rules to be applied.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteMapRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteMapRule": { - "description": "A RouteMap Rule.", - "properties": { - "actions": { - "description": "List of actions which will be applied on a match.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Action" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCriteria": { - "description": "List of matching criterion which will be applied to traffic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Criterion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the rule.", - "type": "string" - }, - "nextStepIfMatched": { - "description": "Next step after rule is evaluated. Current supported behaviors are 'Continue'(to next rule) and 'Terminate'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Continue", - "Terminate" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundRouteMap": { - "description": "The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRouteMap": { - "description": "The resource id of theRouteMap associated with this RoutingConfiguration for outbound advertised routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All", - "AllowRulesOnly" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnectionConfiguration for static routes on this HubVnetConnection.", - "properties": { - "vnetLocalRouteOverrideCriteria": { - "description": "Parameter determining whether NVA in spoke vnet is bypassed for traffic with destination in spoke.", - "oneOf": [ - { - "enum": [ - "Contains", - "Equal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIpConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SwapResourceProperties": { - "description": "Swap resource properties", - "properties": { - "slotType": { - "description": "Specifies slot info on a cloud service", - "oneOf": [ - { - "enum": [ - "Production", - "Staging" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroup": { - "description": "Parameters for VirtualNetworkGatewayPolicyGroup.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of tVirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupMember": { - "description": "Vpn Client Connection configuration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupProperties": { - "description": "Properties of VirtualNetworkGatewayPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VirtualNetworkGatewayPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "isDefault", - "priority", - "policyMembers" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetTraffic": { - "description": "Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity to Azure Virtual WAN.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from remote Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "virtualNetworkGatewayPolicyGroups": { - "description": "The reference to the VirtualNetworkGatewayPolicyGroup resource which represents the available VirtualNetworkGatewayPolicyGroup for the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "staticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnection.", - "oneOf": [ - { - "$ref": "#/definitions/StaticRoutesConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfiguration": { - "description": "A vpn client connection configuration for client connection configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VngClientConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfigurationProperties": { - "description": "Properties of VngClientConnectionConfiguration.", - "properties": { - "virtualNetworkGatewayPolicyGroups": { - "description": "List of references to virtualNetworkGatewayPolicyGroups", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "vpnClientAddressPool", - "virtualNetworkGatewayPolicyGroups" - ], - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vngClientConnectionConfigurations": { - "description": "per ip address pool connection policy for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VngClientConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps_childResource": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2022-07-01/Microsoft.Network.NRP.json b/schemas/2022-07-01/Microsoft.Network.NRP.json deleted file mode 100644 index b89889bdcf..0000000000 --- a/schemas/2022-07-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,25187 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeMaps_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "extension_resourceDefinitions": { - "cloudServiceSlots": { - "description": "Microsoft.Network/cloudServiceSlots", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "swap" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Swap resource properties", - "oneOf": [ - { - "$ref": "#/definitions/SwapResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/cloudServiceSlots" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "Action": { - "description": "Action to be taken on a route matching a RouteMap criterion.", - "properties": { - "parameters": { - "description": "List of parameters relevant to the action.For instance if type is drop then parameters has list of prefixes to be dropped.If type is add, parameters would have list of ASN numbers to be added", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Parameter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of action to be taken. Supported types are 'Remove', 'Add', 'Replace', and 'Drop.'", - "oneOf": [ - { - "enum": [ - "Unknown", - "Remove", - "Add", - "Replace", - "Drop" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "verifyClientRevocation": { - "description": "Verify client certificate revocation status.", - "oneOf": [ - { - "enum": [ - "None", - "OCSP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Customer error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway customer error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway customer error.", - "oneOf": [ - { - "enum": [ - "HttpStatus403", - "HttpStatus502" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "A reference to a virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Criterion": { - "description": "A matching criteria which matches routes based on route prefix, community, and AS path.", - "properties": { - "asPath": { - "description": "List of AS paths which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCondition": { - "description": "Match condition to apply RouteMap rules.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Contains", - "Equals", - "NotContains", - "NotEquals" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "asn": { - "description": "The ASN for CIDR advertising. Should be an integer as string.", - "type": "string" - }, - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "CommissionedNoInternetAdvertise", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "Deprovisioned" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteAdvertise": { - "description": "Whether to do express route advertise.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "geo": { - "description": "The Geo for CIDR advertising. Should be an Geo code.", - "oneOf": [ - { - "enum": [ - "GLOBAL", - "AFRI", - "APAC", - "EURO", - "LATAM", - "NAM", - "ME", - "OCEANIA", - "AQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "Type of custom IP prefix. Should be Singular, Parent, or Child.", - "oneOf": [ - { - "enum": [ - "Singular", - "Parent", - "Child" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": {}, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionMode": { - "description": "The DDoS protection mode of the public IP", - "oneOf": [ - { - "enum": [ - "VirtualNetworkInherited", - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DelegationProperties": { - "description": "Properties of the delegation.", - "properties": { - "serviceName": { - "description": "The service name to which the NVA is delegated.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "allowNonVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from non Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "billingType": { - "description": "The billing type of the ExpressRoutePort resource.", - "oneOf": [ - { - "enum": [ - "MeteredData", - "UnlimitedData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down", - "Drain" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "action": { - "description": "Describes the override action to be applied when rule matches.", - "oneOf": [ - { - "enum": [ - "AnomalyScoring", - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Uppercase", - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTcpStateTracking": { - "description": "Indicates whether to disable tcp state tracking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegation": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/DelegationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "partnerManagedResource": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/PartnerManagedResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN. Microsoft private, public and IANA reserved ASN are not supported.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Parameter": { - "description": "Parameters for an Action.", - "properties": { - "asPath": { - "description": "List of AS paths.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PartnerManagedResourceProperties": { - "description": "Properties of the partner managed resource.", - "properties": {}, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "customBlockResponseBody": { - "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding.", - "oneOf": [ - { - "maxLength": 32768, - "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customBlockResponseStatusCode": { - "description": "If the action type is block, customer can override the response status code.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeThreshold": { - "description": "The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RouteMapProperties": { - "description": "Properties of RouteMap resource", - "properties": { - "associatedInboundConnections": { - "description": "List of connections which have this RoutMap associated for inbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "associatedOutboundConnections": { - "description": "List of connections which have this RoutMap associated for outbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of RouteMap rules to be applied.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteMapRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteMapRule": { - "description": "A RouteMap Rule.", - "properties": { - "actions": { - "description": "List of actions which will be applied on a match.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Action" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCriteria": { - "description": "List of matching criterion which will be applied to traffic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Criterion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the rule.", - "type": "string" - }, - "nextStepIfMatched": { - "description": "Next step after rule is evaluated. Current supported behaviors are 'Continue'(to next rule) and 'Terminate'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Continue", - "Terminate" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundRouteMap": { - "description": "The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRouteMap": { - "description": "The resource id of theRouteMap associated with this RoutingConfiguration for outbound advertised routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All", - "AllowRulesOnly" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnectionConfiguration for static routes on this HubVnetConnection.", - "properties": { - "vnetLocalRouteOverrideCriteria": { - "description": "Parameter determining whether NVA in spoke vnet is bypassed for traffic with destination in spoke.", - "oneOf": [ - { - "enum": [ - "Contains", - "Equal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIpConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SwapResourceProperties": { - "description": "Swap resource properties", - "properties": { - "slotType": { - "description": "Specifies slot info on a cloud service", - "oneOf": [ - { - "enum": [ - "Production", - "Staging" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroup": { - "description": "Parameters for VirtualNetworkGatewayPolicyGroup.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of tVirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupMember": { - "description": "Vpn Client Connection configuration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupProperties": { - "description": "Properties of VirtualNetworkGatewayPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VirtualNetworkGatewayPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "isDefault", - "priority", - "policyMembers" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetTraffic": { - "description": "Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity to Azure Virtual WAN.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from remote Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "virtualNetworkGatewayPolicyGroups": { - "description": "The reference to the VirtualNetworkGatewayPolicyGroup resource which represents the available VirtualNetworkGatewayPolicyGroup for the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "staticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnection.", - "oneOf": [ - { - "$ref": "#/definitions/StaticRoutesConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfiguration": { - "description": "A vpn client connection configuration for client connection configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VngClientConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfigurationProperties": { - "description": "Properties of VngClientConnectionConfiguration.", - "properties": { - "virtualNetworkGatewayPolicyGroups": { - "description": "List of references to virtualNetworkGatewayPolicyGroups", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "vpnClientAddressPool", - "virtualNetworkGatewayPolicyGroups" - ], - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vngClientConnectionConfigurations": { - "description": "per ip address pool connection policy for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VngClientConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps_childResource": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-07-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2022-09-01/Microsoft.Network.NRP.json b/schemas/2022-09-01/Microsoft.Network.NRP.json deleted file mode 100644 index 16861c581d..0000000000 --- a/schemas/2022-09-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,25211 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeMaps_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "extension_resourceDefinitions": { - "cloudServiceSlots": { - "description": "Microsoft.Network/cloudServiceSlots", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "swap" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Swap resource properties", - "oneOf": [ - { - "$ref": "#/definitions/SwapResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/cloudServiceSlots" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "Action": { - "description": "Action to be taken on a route matching a RouteMap criterion.", - "properties": { - "parameters": { - "description": "List of parameters relevant to the action.For instance if type is drop then parameters has list of prefixes to be dropped.If type is add, parameters would have list of ASN numbers to be added", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Parameter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of action to be taken. Supported types are 'Remove', 'Add', 'Replace', and 'Drop.'", - "oneOf": [ - { - "enum": [ - "Unknown", - "Remove", - "Add", - "Replace", - "Drop" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "verifyClientRevocation": { - "description": "Verify client certificate revocation status.", - "oneOf": [ - { - "enum": [ - "None", - "OCSP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Custom error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway custom error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway custom error.", - "oneOf": [ - { - "enum": [ - "HttpStatus400", - "HttpStatus403", - "HttpStatus404", - "HttpStatus405", - "HttpStatus408", - "HttpStatus499", - "HttpStatus500", - "HttpStatus502", - "HttpStatus503", - "HttpStatus504" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "A reference to a virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Criterion": { - "description": "A matching criteria which matches routes based on route prefix, community, and AS path.", - "properties": { - "asPath": { - "description": "List of AS paths which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCondition": { - "description": "Match condition to apply RouteMap rules.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Contains", - "Equals", - "NotContains", - "NotEquals" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "asn": { - "description": "The ASN for CIDR advertising. Should be an integer as string.", - "type": "string" - }, - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "CommissionedNoInternetAdvertise", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "Deprovisioned" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteAdvertise": { - "description": "Whether to do express route advertise.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "geo": { - "description": "The Geo for CIDR advertising. Should be an Geo code.", - "oneOf": [ - { - "enum": [ - "GLOBAL", - "AFRI", - "APAC", - "EURO", - "LATAM", - "NAM", - "ME", - "OCEANIA", - "AQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "Type of custom IP prefix. Should be Singular, Parent, or Child.", - "oneOf": [ - { - "enum": [ - "Singular", - "Parent", - "Child" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": {}, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionMode": { - "description": "The DDoS protection mode of the public IP", - "oneOf": [ - { - "enum": [ - "VirtualNetworkInherited", - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DelegationProperties": { - "description": "Properties of the delegation.", - "properties": { - "serviceName": { - "description": "The service name to which the NVA is delegated.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "allowNonVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from non Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "billingType": { - "description": "The billing type of the ExpressRoutePort resource.", - "oneOf": [ - { - "enum": [ - "MeteredData", - "UnlimitedData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down", - "Drain" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "action": { - "description": "Describes the override action to be applied when rule matches. 'Allow' action is not available for CRS 3.2", - "oneOf": [ - { - "enum": [ - "AnomalyScoring", - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Uppercase", - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTcpStateTracking": { - "description": "Indicates whether to disable tcp state tracking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegation": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/DelegationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "partnerManagedResource": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/PartnerManagedResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN. Microsoft private, public and IANA reserved ASN are not supported.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Parameter": { - "description": "Parameters for an Action.", - "properties": { - "asPath": { - "description": "List of AS paths.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PartnerManagedResourceProperties": { - "description": "Properties of the partner managed resource.", - "properties": {}, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "customBlockResponseBody": { - "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding.", - "oneOf": [ - { - "maxLength": 32768, - "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customBlockResponseStatusCode": { - "description": "If the action type is block, customer can override the response status code.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeThreshold": { - "description": "The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RouteMapProperties": { - "description": "Properties of RouteMap resource", - "properties": { - "associatedInboundConnections": { - "description": "List of connections which have this RoutMap associated for inbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "associatedOutboundConnections": { - "description": "List of connections which have this RoutMap associated for outbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of RouteMap rules to be applied.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteMapRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteMapRule": { - "description": "A RouteMap Rule.", - "properties": { - "actions": { - "description": "List of actions which will be applied on a match.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Action" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCriteria": { - "description": "List of matching criterion which will be applied to traffic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Criterion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the rule.", - "type": "string" - }, - "nextStepIfMatched": { - "description": "Next step after rule is evaluated. Current supported behaviors are 'Continue'(to next rule) and 'Terminate'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Continue", - "Terminate" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundRouteMap": { - "description": "The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRouteMap": { - "description": "The resource id of theRouteMap associated with this RoutingConfiguration for outbound advertised routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All", - "AllowRulesOnly" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnectionConfiguration for static routes on this HubVnetConnection.", - "properties": { - "vnetLocalRouteOverrideCriteria": { - "description": "Parameter determining whether NVA in spoke vnet is bypassed for traffic with destination in spoke.", - "oneOf": [ - { - "enum": [ - "Contains", - "Equal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIPConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SwapResourceProperties": { - "description": "Swap resource properties", - "properties": { - "slotType": { - "description": "Specifies slot info on a cloud service", - "oneOf": [ - { - "enum": [ - "Production", - "Staging" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroup": { - "description": "Parameters for VirtualNetworkGatewayPolicyGroup.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of tVirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupMember": { - "description": "Vpn Client Connection configuration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupProperties": { - "description": "Properties of VirtualNetworkGatewayPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VirtualNetworkGatewayPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "isDefault", - "priority", - "policyMembers" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetTraffic": { - "description": "Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity to Azure Virtual WAN.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from remote Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "virtualNetworkGatewayPolicyGroups": { - "description": "The reference to the VirtualNetworkGatewayPolicyGroup resource which represents the available VirtualNetworkGatewayPolicyGroup for the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "staticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnection.", - "oneOf": [ - { - "$ref": "#/definitions/StaticRoutesConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfiguration": { - "description": "A vpn client connection configuration for client connection configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VngClientConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfigurationProperties": { - "description": "Properties of VngClientConnectionConfiguration.", - "properties": { - "virtualNetworkGatewayPolicyGroups": { - "description": "List of references to virtualNetworkGatewayPolicyGroups", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "vpnClientAddressPool", - "virtualNetworkGatewayPolicyGroups" - ], - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vngClientConnectionConfigurations": { - "description": "per ip address pool connection policy for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VngClientConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps_childResource": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2022-11-01/Microsoft.Network.NRP.json b/schemas/2022-11-01/Microsoft.Network.NRP.json deleted file mode 100644 index 4f6a463da3..0000000000 --- a/schemas/2022-11-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,25551 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeMaps_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "extension_resourceDefinitions": { - "cloudServiceSlots": { - "description": "Microsoft.Network/cloudServiceSlots", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "swap" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Swap resource properties", - "oneOf": [ - { - "$ref": "#/definitions/SwapResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/cloudServiceSlots" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "Action": { - "description": "Action to be taken on a route matching a RouteMap criterion.", - "properties": { - "parameters": { - "description": "List of parameters relevant to the action.For instance if type is drop then parameters has list of prefixes to be dropped.If type is add, parameters would have list of ASN numbers to be added", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Parameter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of action to be taken. Supported types are 'Remove', 'Add', 'Replace', and 'Drop.'", - "oneOf": [ - { - "enum": [ - "Unknown", - "Remove", - "Add", - "Replace", - "Drop" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "verifyClientRevocation": { - "description": "Verify client certificate revocation status.", - "oneOf": [ - { - "enum": [ - "None", - "OCSP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Custom error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway custom error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway custom error.", - "oneOf": [ - { - "enum": [ - "HttpStatus400", - "HttpStatus403", - "HttpStatus404", - "HttpStatus405", - "HttpStatus408", - "HttpStatus499", - "HttpStatus500", - "HttpStatus502", - "HttpStatus503", - "HttpStatus504" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "A reference to a virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableKerberos": { - "description": "Enable/Disable Kerberos feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Criterion": { - "description": "A matching criteria which matches routes based on route prefix, community, and AS path.", - "properties": { - "asPath": { - "description": "List of AS paths which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCondition": { - "description": "Match condition to apply RouteMap rules.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Contains", - "Equals", - "NotContains", - "NotEquals" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "asn": { - "description": "The ASN for CIDR advertising. Should be an integer as string.", - "type": "string" - }, - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "CommissionedNoInternetAdvertise", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "Deprovisioned" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteAdvertise": { - "description": "Whether to do express route advertise.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "geo": { - "description": "The Geo for CIDR advertising. Should be an Geo code.", - "oneOf": [ - { - "enum": [ - "GLOBAL", - "AFRI", - "APAC", - "EURO", - "LATAM", - "NAM", - "ME", - "OCEANIA", - "AQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "Type of custom IP prefix. Should be Singular, Parent, or Child.", - "oneOf": [ - { - "enum": [ - "Singular", - "Parent", - "Child" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": {}, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionMode": { - "description": "The DDoS protection mode of the public IP", - "oneOf": [ - { - "enum": [ - "VirtualNetworkInherited", - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DelegationProperties": { - "description": "Properties of the delegation.", - "properties": { - "serviceName": { - "description": "The service name to which the NVA is delegated.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "allowNonVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from non Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "billingType": { - "description": "The billing type of the ExpressRoutePort resource.", - "oneOf": [ - { - "enum": [ - "MeteredData", - "UnlimitedData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyHttpHeaderToInsert": { - "description": "name and value of HTTP/S header to insert", - "properties": { - "headerName": { - "description": "Contains the name of the header", - "type": "string" - }, - "headerValue": { - "description": "Contains the value of the header", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpHeadersToInsert": { - "description": "List of HTTP/S headers to insert.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyHttpHeaderToInsert" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GroupByUserSession": { - "description": "Define user session identifier group by clauses.", - "properties": { - "groupByVariables": { - "description": "List of group by clause variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "groupByVariables" - ], - "type": "object" - }, - "GroupByVariable": { - "description": "Define user session group by clause variables.", - "properties": { - "variableName": { - "description": "User Session clause variable.", - "oneOf": [ - { - "enum": [ - "ClientAddr", - "GeoLocation", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "action": { - "description": "Describes the override action to be applied when rule matches.", - "oneOf": [ - { - "enum": [ - "AnomalyScoring", - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Uppercase", - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating", - "AcceleratedConnections" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "auxiliarySku": { - "description": "Auxiliary sku of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "A1", - "A2", - "A4", - "A8" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTcpStateTracking": { - "description": "Indicates whether to disable tcp state tracking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "additionalNics": { - "description": "Details required for Additional Network Interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualApplianceAdditionalNicProperties" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegation": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/DelegationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "partnerManagedResource": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/PartnerManagedResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN. Microsoft private, public and IANA reserved ASN are not supported.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Parameter": { - "description": "Parameters for an Action.", - "properties": { - "asPath": { - "description": "List of AS paths.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PartnerManagedResourceProperties": { - "description": "Properties of the partner managed resource.", - "properties": {}, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "customBlockResponseBody": { - "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding.", - "oneOf": [ - { - "maxLength": 32768, - "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customBlockResponseStatusCode": { - "description": "If the action type is block, customer can override the response status code.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadEnforcement": { - "description": "Whether allow WAF to enforce file upload limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logScrubbing": { - "description": "To scrub sensitive log fields", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettingsLogScrubbing" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyEnforcement": { - "description": "Whether allow WAF to enforce request body limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyInspectLimitInKB": { - "description": "Max inspection limit in KB for request body inspection for WAF.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PolicySettingsLogScrubbing": { - "description": "To scrub sensitive log fields", - "properties": { - "scrubbingRules": { - "description": "The rules that are applied to the logs for scrubbing.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallScrubbingRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "State of the log scrubbing config. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeThreshold": { - "description": "The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "domainNameLabelScope": { - "description": "The domain name label scope. If a domain name label and a domain name label scope are specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system with a hashed value includes in FQDN.", - "oneOf": [ - { - "enum": [ - "TenantReuse", - "SubscriptionReuse", - "ResourceGroupReuse", - "NoReuse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RouteMapProperties": { - "description": "Properties of RouteMap resource", - "properties": { - "associatedInboundConnections": { - "description": "List of connections which have this RoutMap associated for inbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "associatedOutboundConnections": { - "description": "List of connections which have this RoutMap associated for outbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of RouteMap rules to be applied.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteMapRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteMapRule": { - "description": "A RouteMap Rule.", - "properties": { - "actions": { - "description": "List of actions which will be applied on a match.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Action" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCriteria": { - "description": "List of matching criterion which will be applied to traffic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Criterion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the rule.", - "type": "string" - }, - "nextStepIfMatched": { - "description": "Next step after rule is evaluated. Current supported behaviors are 'Continue'(to next rule) and 'Terminate'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Continue", - "Terminate" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundRouteMap": { - "description": "The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRouteMap": { - "description": "The resource id of theRouteMap associated with this RoutingConfiguration for outbound advertised routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All", - "AllowRulesOnly" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnectionConfiguration for static routes on this HubVnetConnection.", - "properties": { - "vnetLocalRouteOverrideCriteria": { - "description": "Parameter determining whether NVA in spoke vnet is bypassed for traffic with destination in spoke.", - "oneOf": [ - { - "enum": [ - "Contains", - "Equal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIPConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SwapResourceProperties": { - "description": "Swap resource properties", - "properties": { - "slotType": { - "description": "Specifies slot info on a cloud service", - "oneOf": [ - { - "enum": [ - "Production", - "Staging" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceAdditionalNicProperties": { - "description": "Network Virtual Appliance Additional NIC properties.", - "properties": { - "hasPublicIp": { - "description": "Customer Intent for Public Ip on additional nic", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Customer Name for additional nic", - "type": "string" - } - }, - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroup": { - "description": "Parameters for VirtualNetworkGatewayPolicyGroup.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of tVirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupMember": { - "description": "Vpn Client Connection configuration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupProperties": { - "description": "Properties of VirtualNetworkGatewayPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VirtualNetworkGatewayPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "isDefault", - "priority", - "policyMembers" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetTraffic": { - "description": "Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity to Azure Virtual WAN.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from remote Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "virtualNetworkGatewayPolicyGroups": { - "description": "The reference to the VirtualNetworkGatewayPolicyGroup resource which represents the available VirtualNetworkGatewayPolicyGroup for the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "staticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnection.", - "oneOf": [ - { - "$ref": "#/definitions/StaticRoutesConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfiguration": { - "description": "A vpn client connection configuration for client connection configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VngClientConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfigurationProperties": { - "description": "Properties of VngClientConnectionConfiguration.", - "properties": { - "virtualNetworkGatewayPolicyGroups": { - "description": "List of references to virtualNetworkGatewayPolicyGroups", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "vpnClientAddressPool", - "virtualNetworkGatewayPolicyGroups" - ], - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vngClientConnectionConfigurations": { - "description": "per ip address pool connection policy for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VngClientConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "groupByUserSession": { - "description": "List of user session identifier group by clauses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByUserSession" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitDuration": { - "description": "Duration over which Rate Limit policy will be applied. Applies only when ruleType is RateLimitRule.", - "oneOf": [ - { - "enum": [ - "OneMin", - "FiveMins" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitThreshold": { - "description": "Rate Limit threshold to apply in case ruleType is RateLimitRule. Must be greater than or equal to 1", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "RateLimitRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "WebApplicationFirewallScrubbingRules": { - "description": "Allow certain variables to be scrubbed on WAF logs", - "properties": { - "matchVariable": { - "description": "The variable to be scrubbed from the logs.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestPostArgNames", - "RequestJSONArgNames", - "RequestIPAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Defines the state of log scrubbing rule. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps_childResource": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2022-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2023-02-01/Microsoft.Network.NRP.json b/schemas/2023-02-01/Microsoft.Network.NRP.json deleted file mode 100644 index d508bbf672..0000000000 --- a/schemas/2023-02-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,25565 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeMaps_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "extension_resourceDefinitions": { - "cloudServiceSlots": { - "description": "Microsoft.Network/cloudServiceSlots", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "swap" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Swap resource properties", - "oneOf": [ - { - "$ref": "#/definitions/SwapResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/cloudServiceSlots" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "Action": { - "description": "Action to be taken on a route matching a RouteMap criterion.", - "properties": { - "parameters": { - "description": "List of parameters relevant to the action.For instance if type is drop then parameters has list of prefixes to be dropped.If type is add, parameters would have list of ASN numbers to be added", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Parameter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of action to be taken. Supported types are 'Remove', 'Add', 'Replace', and 'Drop.'", - "oneOf": [ - { - "enum": [ - "Unknown", - "Remove", - "Add", - "Replace", - "Drop" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "verifyClientRevocation": { - "description": "Verify client certificate revocation status.", - "oneOf": [ - { - "enum": [ - "None", - "OCSP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Custom error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway custom error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway custom error.", - "oneOf": [ - { - "enum": [ - "HttpStatus400", - "HttpStatus403", - "HttpStatus404", - "HttpStatus405", - "HttpStatus408", - "HttpStatus500", - "HttpStatus502", - "HttpStatus503", - "HttpStatus504" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "A reference to a virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableKerberos": { - "description": "Enable/Disable Kerberos feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Criterion": { - "description": "A matching criteria which matches routes based on route prefix, community, and AS path.", - "properties": { - "asPath": { - "description": "List of AS paths which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCondition": { - "description": "Match condition to apply RouteMap rules.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Contains", - "Equals", - "NotContains", - "NotEquals" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "asn": { - "description": "The ASN for CIDR advertising. Should be an integer as string.", - "type": "string" - }, - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "CommissionedNoInternetAdvertise", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "Deprovisioned" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteAdvertise": { - "description": "Whether to do express route advertise.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "geo": { - "description": "The Geo for CIDR advertising. Should be an Geo code.", - "oneOf": [ - { - "enum": [ - "GLOBAL", - "AFRI", - "APAC", - "EURO", - "LATAM", - "NAM", - "ME", - "OCEANIA", - "AQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "Type of custom IP prefix. Should be Singular, Parent, or Child.", - "oneOf": [ - { - "enum": [ - "Singular", - "Parent", - "Child" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": {}, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionMode": { - "description": "The DDoS protection mode of the public IP", - "oneOf": [ - { - "enum": [ - "VirtualNetworkInherited", - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DelegationProperties": { - "description": "Properties of the delegation.", - "properties": { - "serviceName": { - "description": "The service name to which the NVA is delegated.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "allowNonVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from non Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "billingType": { - "description": "The billing type of the ExpressRoutePort resource.", - "oneOf": [ - { - "enum": [ - "MeteredData", - "UnlimitedData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyHttpHeaderToInsert": { - "description": "name and value of HTTP/S header to insert", - "properties": { - "headerName": { - "description": "Contains the name of the header", - "type": "string" - }, - "headerValue": { - "description": "Contains the value of the header", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpHeadersToInsert": { - "description": "List of HTTP/S headers to insert.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyHttpHeaderToInsert" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GroupByUserSession": { - "description": "Define user session identifier group by clauses.", - "properties": { - "groupByVariables": { - "description": "List of group by clause variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "groupByVariables" - ], - "type": "object" - }, - "GroupByVariable": { - "description": "Define user session group by clause variables.", - "properties": { - "variableName": { - "description": "User Session clause variable.", - "oneOf": [ - { - "enum": [ - "ClientAddr", - "GeoLocation", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "action": { - "description": "Describes the override action to be applied when rule matches.", - "oneOf": [ - { - "enum": [ - "AnomalyScoring", - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Uppercase", - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating", - "AcceleratedConnections" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "auxiliarySku": { - "description": "Auxiliary sku of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "A1", - "A2", - "A4", - "A8" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTcpStateTracking": { - "description": "Indicates whether to disable tcp state tracking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "additionalNics": { - "description": "Details required for Additional Network Interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualApplianceAdditionalNicProperties" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegation": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/DelegationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "partnerManagedResource": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/PartnerManagedResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN. Microsoft private, public and IANA reserved ASN are not supported.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Parameter": { - "description": "Parameters for an Action.", - "properties": { - "asPath": { - "description": "List of AS paths.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PartnerManagedResourceProperties": { - "description": "Properties of the partner managed resource.", - "properties": {}, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "customBlockResponseBody": { - "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding.", - "oneOf": [ - { - "maxLength": 32768, - "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customBlockResponseStatusCode": { - "description": "If the action type is block, customer can override the response status code.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadEnforcement": { - "description": "Whether allow WAF to enforce file upload limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logScrubbing": { - "description": "To scrub sensitive log fields", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettingsLogScrubbing" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyEnforcement": { - "description": "Whether allow WAF to enforce request body limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyInspectLimitInKB": { - "description": "Max inspection limit in KB for request body inspection for WAF.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PolicySettingsLogScrubbing": { - "description": "To scrub sensitive log fields", - "properties": { - "scrubbingRules": { - "description": "The rules that are applied to the logs for scrubbing.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallScrubbingRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "State of the log scrubbing config. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeThreshold": { - "description": "The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "domainNameLabelScope": { - "description": "The domain name label scope. If a domain name label and a domain name label scope are specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system with a hashed value includes in FQDN.", - "oneOf": [ - { - "enum": [ - "TenantReuse", - "SubscriptionReuse", - "ResourceGroupReuse", - "NoReuse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RouteMapProperties": { - "description": "Properties of RouteMap resource", - "properties": { - "associatedInboundConnections": { - "description": "List of connections which have this RoutMap associated for inbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "associatedOutboundConnections": { - "description": "List of connections which have this RoutMap associated for outbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of RouteMap rules to be applied.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteMapRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteMapRule": { - "description": "A RouteMap Rule.", - "properties": { - "actions": { - "description": "List of actions which will be applied on a match.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Action" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCriteria": { - "description": "List of matching criterion which will be applied to traffic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Criterion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the rule.", - "type": "string" - }, - "nextStepIfMatched": { - "description": "Next step after rule is evaluated. Current supported behaviors are 'Continue'(to next rule) and 'Terminate'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Continue", - "Terminate" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundRouteMap": { - "description": "The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRouteMap": { - "description": "The resource id of theRouteMap associated with this RoutingConfiguration for outbound advertised routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All", - "AllowRulesOnly" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnectionConfiguration for static routes on this HubVnetConnection.", - "properties": { - "vnetLocalRouteOverrideCriteria": { - "description": "Parameter determining whether NVA in spoke vnet is bypassed for traffic with destination in spoke.", - "oneOf": [ - { - "enum": [ - "Contains", - "Equal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIPConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SwapResourceProperties": { - "description": "Swap resource properties", - "properties": { - "slotType": { - "description": "Specifies slot info on a cloud service", - "oneOf": [ - { - "enum": [ - "Production", - "Staging" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceAdditionalNicProperties": { - "description": "Network Virtual Appliance Additional NIC properties.", - "properties": { - "hasPublicIp": { - "description": "Flag (true or false) for Intent for Public Ip on additional nic", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of additional nic", - "type": "string" - } - }, - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroup": { - "description": "Parameters for VirtualNetworkGatewayPolicyGroup.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of tVirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupMember": { - "description": "Vpn Client Connection configuration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupProperties": { - "description": "Properties of VirtualNetworkGatewayPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VirtualNetworkGatewayPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "isDefault", - "priority", - "policyMembers" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "adminState": { - "description": "Property to indicate if the Express Route Gateway serves traffic when there are multiple Express Route Gateways in the vnet", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetTraffic": { - "description": "Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity to Azure Virtual WAN.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from remote Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "virtualNetworkGatewayPolicyGroups": { - "description": "The reference to the VirtualNetworkGatewayPolicyGroup resource which represents the available VirtualNetworkGatewayPolicyGroup for the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "staticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnection.", - "oneOf": [ - { - "$ref": "#/definitions/StaticRoutesConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfiguration": { - "description": "A vpn client connection configuration for client connection configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VngClientConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfigurationProperties": { - "description": "Properties of VngClientConnectionConfiguration.", - "properties": { - "virtualNetworkGatewayPolicyGroups": { - "description": "List of references to virtualNetworkGatewayPolicyGroups", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "vpnClientAddressPool", - "virtualNetworkGatewayPolicyGroups" - ], - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vngClientConnectionConfigurations": { - "description": "per ip address pool connection policy for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VngClientConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "groupByUserSession": { - "description": "List of user session identifier group by clauses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByUserSession" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitDuration": { - "description": "Duration over which Rate Limit policy will be applied. Applies only when ruleType is RateLimitRule.", - "oneOf": [ - { - "enum": [ - "OneMin", - "FiveMins" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitThreshold": { - "description": "Rate Limit threshold to apply in case ruleType is RateLimitRule. Must be greater than or equal to 1", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "RateLimitRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "WebApplicationFirewallScrubbingRules": { - "description": "Allow certain variables to be scrubbed on WAF logs", - "properties": { - "matchVariable": { - "description": "The variable to be scrubbed from the logs.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestPostArgNames", - "RequestJSONArgNames", - "RequestIPAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Defines the state of log scrubbing rule. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps_childResource": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-02-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2023-03-01-preview/Microsoft.Network.NRP.json b/schemas/2023-03-01-preview/Microsoft.Network.NRP.json deleted file mode 100644 index 9c65b7c2df..0000000000 --- a/schemas/2023-03-01-preview/Microsoft.Network.NRP.json +++ /dev/null @@ -1,439 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2023-03-01-preview/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "networkManagers_routingConfigurations": { - "description": "Microsoft.Network/networkManagers/routingConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-03-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Routing Configuration.", - "oneOf": [ - { - "pattern": "^[a-zA-Z0-9_.-]*$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Indicates the properties for the network manager routing configuration.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_routingConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/routingConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_routingConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/routingConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-03-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager routing Configuration rule collection.", - "oneOf": [ - { - "pattern": "^[a-zA-Z0-9_.-]*$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Indicates the properties for the network manager routing rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_routingConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/routingConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_routingConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/routingConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-03-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "oneOf": [ - { - "pattern": "^[a-zA-Z0-9_.-]*$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Indicates the properties of the routing rule", - "oneOf": [ - { - "$ref": "#/definitions/RoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/routingConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "NetworkManagerRoutingGroupItem": { - "description": "Network manager routing group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "RoutingConfigurationPropertiesFormat": { - "description": "Defines the routing configuration properties.", - "properties": { - "description": { - "description": "A description of the routing configuration.", - "type": "string" - } - }, - "type": "object" - }, - "RoutingRuleCollectionPropertiesFormat": { - "description": "Defines the routing rule collection properties.", - "properties": { - "appliesTo": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerRoutingGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the routing rule collection.", - "type": "string" - }, - "disableBgpRoutePropagation": { - "description": "Determines whether BGP route propagation is enabled. Defaults to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localRouteSetting": { - "description": "Indicates local route setting for this particular rule collection.", - "oneOf": [ - { - "enum": [ - "NotSpecified", - "DirectRoutingWithinVNet", - "DirectRoutingWithinSubnet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "appliesTo", - "localRouteSetting" - ], - "type": "object" - }, - "RoutingRuleNextHop": { - "description": "Next hop.", - "properties": { - "nextHopAddress": { - "description": "Next hop address. Only relevant if the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "Next hop type.", - "oneOf": [ - { - "enum": [ - "Internet", - "NoNextNop", - "VirtualAppliance", - "VirtualNetworkGateway", - "VnetLocal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RoutingRulePropertiesFormat": { - "description": "Routing routing rule resource.", - "properties": { - "description": { - "description": "A description for this rule.", - "type": "string" - }, - "destination": { - "description": "Indicates the destination for this particular rule.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingRuleRouteDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHop": { - "description": "Indicates the next hop for this particular rule.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingRuleNextHop" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "destination", - "nextHop" - ], - "type": "object" - }, - "RoutingRuleRouteDestination": { - "description": "Route destination.", - "properties": { - "destinationAddress": { - "description": "Destination address.", - "type": "string" - }, - "type": { - "description": "Destination type.", - "oneOf": [ - { - "enum": [ - "AddressPrefix", - "ServiceTag" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "type", - "destinationAddress" - ], - "type": "object" - }, - "networkManagers_routingConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/routingConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-03-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager routing Configuration rule collection.", - "oneOf": [ - { - "pattern": "^[a-zA-Z0-9_.-]*$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Indicates the properties for the network manager routing rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_routingConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/routingConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-03-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "oneOf": [ - { - "pattern": "^[a-zA-Z0-9_.-]*$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Indicates the properties of the routing rule", - "oneOf": [ - { - "$ref": "#/definitions/RoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2023-04-01/Microsoft.Network.NRP.json b/schemas/2023-04-01/Microsoft.Network.NRP.json deleted file mode 100644 index f62be1cb8a..0000000000 --- a/schemas/2023-04-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,25582 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeMaps_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "extension_resourceDefinitions": { - "cloudServiceSlots": { - "description": "Microsoft.Network/cloudServiceSlots", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "swap" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Swap resource properties", - "oneOf": [ - { - "$ref": "#/definitions/SwapResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/cloudServiceSlots" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "Action": { - "description": "Action to be taken on a route matching a RouteMap criterion.", - "properties": { - "parameters": { - "description": "List of parameters relevant to the action.For instance if type is drop then parameters has list of prefixes to be dropped.If type is add, parameters would have list of ASN numbers to be added", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Parameter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of action to be taken. Supported types are 'Remove', 'Add', 'Replace', and 'Drop.'", - "oneOf": [ - { - "enum": [ - "Unknown", - "Remove", - "Add", - "Replace", - "Drop" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "verifyClientRevocation": { - "description": "Verify client certificate revocation status.", - "oneOf": [ - { - "enum": [ - "None", - "OCSP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Custom error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway custom error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway custom error.", - "oneOf": [ - { - "enum": [ - "HttpStatus400", - "HttpStatus403", - "HttpStatus404", - "HttpStatus405", - "HttpStatus408", - "HttpStatus500", - "HttpStatus502", - "HttpStatus503", - "HttpStatus504" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Basic, Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "syncMode": { - "description": "Backend address synchronous mode for the backend pool", - "oneOf": [ - { - "enum": [ - "Automatic", - "Manual" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "A reference to a virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableKerberos": { - "description": "Enable/Disable Kerberos feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Criterion": { - "description": "A matching criteria which matches routes based on route prefix, community, and AS path.", - "properties": { - "asPath": { - "description": "List of AS paths which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCondition": { - "description": "Match condition to apply RouteMap rules.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Contains", - "Equals", - "NotContains", - "NotEquals" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "asn": { - "description": "The ASN for CIDR advertising. Should be an integer as string.", - "type": "string" - }, - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "CommissionedNoInternetAdvertise", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "Deprovisioned" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteAdvertise": { - "description": "Whether to do express route advertise.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "geo": { - "description": "The Geo for CIDR advertising. Should be an Geo code.", - "oneOf": [ - { - "enum": [ - "GLOBAL", - "AFRI", - "APAC", - "EURO", - "LATAM", - "NAM", - "ME", - "OCEANIA", - "AQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "Type of custom IP prefix. Should be Singular, Parent, or Child.", - "oneOf": [ - { - "enum": [ - "Singular", - "Parent", - "Child" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": {}, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionMode": { - "description": "The DDoS protection mode of the public IP", - "oneOf": [ - { - "enum": [ - "VirtualNetworkInherited", - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DelegationProperties": { - "description": "Properties of the delegation.", - "properties": { - "serviceName": { - "description": "The service name to which the NVA is delegated.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "allowNonVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from non Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "billingType": { - "description": "The billing type of the ExpressRoutePort resource.", - "oneOf": [ - { - "enum": [ - "MeteredData", - "UnlimitedData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyHttpHeaderToInsert": { - "description": "name and value of HTTP/S header to insert", - "properties": { - "headerName": { - "description": "Contains the name of the header", - "type": "string" - }, - "headerValue": { - "description": "Contains the value of the header", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpHeadersToInsert": { - "description": "List of HTTP/S headers to insert.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyHttpHeaderToInsert" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GroupByUserSession": { - "description": "Define user session identifier group by clauses.", - "properties": { - "groupByVariables": { - "description": "List of group by clause variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "groupByVariables" - ], - "type": "object" - }, - "GroupByVariable": { - "description": "Define user session group by clause variables.", - "properties": { - "variableName": { - "description": "User Session clause variable.", - "oneOf": [ - { - "enum": [ - "ClientAddr", - "GeoLocation", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "action": { - "description": "Describes the override action to be applied when rule matches.", - "oneOf": [ - { - "enum": [ - "AnomalyScoring", - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Uppercase", - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating", - "AcceleratedConnections" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "auxiliarySku": { - "description": "Auxiliary sku of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "A1", - "A2", - "A4", - "A8" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTcpStateTracking": { - "description": "Indicates whether to disable tcp state tracking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "additionalNics": { - "description": "Details required for Additional Network Interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualApplianceAdditionalNicProperties" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegation": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/DelegationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "partnerManagedResource": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/PartnerManagedResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN. Microsoft private, public and IANA reserved ASN are not supported.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Parameter": { - "description": "Parameters for an Action.", - "properties": { - "asPath": { - "description": "List of AS paths.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PartnerManagedResourceProperties": { - "description": "Properties of the partner managed resource.", - "properties": {}, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "customBlockResponseBody": { - "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding.", - "oneOf": [ - { - "maxLength": 32768, - "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customBlockResponseStatusCode": { - "description": "If the action type is block, customer can override the response status code.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadEnforcement": { - "description": "Whether allow WAF to enforce file upload limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logScrubbing": { - "description": "To scrub sensitive log fields", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettingsLogScrubbing" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyEnforcement": { - "description": "Whether allow WAF to enforce request body limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyInspectLimitInKB": { - "description": "Max inspection limit in KB for request body inspection for WAF.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PolicySettingsLogScrubbing": { - "description": "To scrub sensitive log fields", - "properties": { - "scrubbingRules": { - "description": "The rules that are applied to the logs for scrubbing.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallScrubbingRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "State of the log scrubbing config. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeThreshold": { - "description": "The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "domainNameLabelScope": { - "description": "The domain name label scope. If a domain name label and a domain name label scope are specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system with a hashed value includes in FQDN.", - "oneOf": [ - { - "enum": [ - "TenantReuse", - "SubscriptionReuse", - "ResourceGroupReuse", - "NoReuse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RouteMapProperties": { - "description": "Properties of RouteMap resource", - "properties": { - "associatedInboundConnections": { - "description": "List of connections which have this RoutMap associated for inbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "associatedOutboundConnections": { - "description": "List of connections which have this RoutMap associated for outbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of RouteMap rules to be applied.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteMapRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteMapRule": { - "description": "A RouteMap Rule.", - "properties": { - "actions": { - "description": "List of actions which will be applied on a match.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Action" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCriteria": { - "description": "List of matching criterion which will be applied to traffic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Criterion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the rule.", - "type": "string" - }, - "nextStepIfMatched": { - "description": "Next step after rule is evaluated. Current supported behaviors are 'Continue'(to next rule) and 'Terminate'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Continue", - "Terminate" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundRouteMap": { - "description": "The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRouteMap": { - "description": "The resource id of theRouteMap associated with this RoutingConfiguration for outbound advertised routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All", - "AllowRulesOnly" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnectionConfiguration for static routes on this HubVnetConnection.", - "properties": { - "vnetLocalRouteOverrideCriteria": { - "description": "Parameter determining whether NVA in spoke vnet is bypassed for traffic with destination in spoke.", - "oneOf": [ - { - "enum": [ - "Contains", - "Equal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIPConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SwapResourceProperties": { - "description": "Swap resource properties", - "properties": { - "slotType": { - "description": "Specifies slot info on a cloud service", - "oneOf": [ - { - "enum": [ - "Production", - "Staging" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceAdditionalNicProperties": { - "description": "Network Virtual Appliance Additional NIC properties.", - "properties": { - "hasPublicIp": { - "description": "Flag (true or false) for Intent for Public Ip on additional nic", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of additional nic", - "type": "string" - } - }, - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroup": { - "description": "Parameters for VirtualNetworkGatewayPolicyGroup.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of tVirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupMember": { - "description": "Vpn Client Connection configuration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupProperties": { - "description": "Properties of VirtualNetworkGatewayPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VirtualNetworkGatewayPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "isDefault", - "priority", - "policyMembers" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "adminState": { - "description": "Property to indicate if the Express Route Gateway serves traffic when there are multiple Express Route Gateways in the vnet", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetTraffic": { - "description": "Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity to Azure Virtual WAN.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from remote Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "virtualNetworkGatewayPolicyGroups": { - "description": "The reference to the VirtualNetworkGatewayPolicyGroup resource which represents the available VirtualNetworkGatewayPolicyGroup for the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "staticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnection.", - "oneOf": [ - { - "$ref": "#/definitions/StaticRoutesConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfiguration": { - "description": "A vpn client connection configuration for client connection configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VngClientConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfigurationProperties": { - "description": "Properties of VngClientConnectionConfiguration.", - "properties": { - "virtualNetworkGatewayPolicyGroups": { - "description": "List of references to virtualNetworkGatewayPolicyGroups", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "vpnClientAddressPool", - "virtualNetworkGatewayPolicyGroups" - ], - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vngClientConnectionConfigurations": { - "description": "per ip address pool connection policy for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VngClientConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "groupByUserSession": { - "description": "List of user session identifier group by clauses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByUserSession" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitDuration": { - "description": "Duration over which Rate Limit policy will be applied. Applies only when ruleType is RateLimitRule.", - "oneOf": [ - { - "enum": [ - "OneMin", - "FiveMins" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitThreshold": { - "description": "Rate Limit threshold to apply in case ruleType is RateLimitRule. Must be greater than or equal to 1", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "RateLimitRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "WebApplicationFirewallScrubbingRules": { - "description": "Allow certain variables to be scrubbed on WAF logs", - "properties": { - "matchVariable": { - "description": "The variable to be scrubbed from the logs.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestPostArgNames", - "RequestJSONArgNames", - "RequestIPAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Defines the state of log scrubbing rule. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps_childResource": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-04-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2023-05-01/Microsoft.Network.NRP.json b/schemas/2023-05-01/Microsoft.Network.NRP.json deleted file mode 100644 index 833d88501b..0000000000 --- a/schemas/2023-05-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,25698 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeMaps_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "extension_resourceDefinitions": { - "cloudServiceSlots": { - "description": "Microsoft.Network/cloudServiceSlots", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "swap" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Swap resource properties", - "oneOf": [ - { - "$ref": "#/definitions/SwapResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/cloudServiceSlots" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "Action": { - "description": "Action to be taken on a route matching a RouteMap criterion.", - "properties": { - "parameters": { - "description": "List of parameters relevant to the action.For instance if type is drop then parameters has list of prefixes to be dropped.If type is add, parameters would have list of ASN numbers to be added", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Parameter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of action to be taken. Supported types are 'Remove', 'Add', 'Replace', and 'Drop.'", - "oneOf": [ - { - "enum": [ - "Unknown", - "Remove", - "Add", - "Replace", - "Drop" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "verifyClientRevocation": { - "description": "Verify client certificate revocation status.", - "oneOf": [ - { - "enum": [ - "None", - "OCSP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Custom error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway custom error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway custom error.", - "oneOf": [ - { - "enum": [ - "HttpStatus400", - "HttpStatus403", - "HttpStatus404", - "HttpStatus405", - "HttpStatus408", - "HttpStatus500", - "HttpStatus502", - "HttpStatus503", - "HttpStatus504" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Basic, Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "syncMode": { - "description": "Backend address synchronous mode for the backend pool", - "oneOf": [ - { - "enum": [ - "Automatic", - "Manual" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "A reference to a virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableKerberos": { - "description": "Enable/Disable Kerberos feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkAcls": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormatNetworkAcls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network required for Developer Bastion Host only.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostPropertiesFormatNetworkAcls": { - "properties": { - "ipRules": { - "description": "Sets the IP ACL rules for Developer Bastion Host.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Criterion": { - "description": "A matching criteria which matches routes based on route prefix, community, and AS path.", - "properties": { - "asPath": { - "description": "List of AS paths which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCondition": { - "description": "Match condition to apply RouteMap rules.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Contains", - "Equals", - "NotContains", - "NotEquals" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "asn": { - "description": "The ASN for CIDR advertising. Should be an integer as string.", - "type": "string" - }, - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "CommissionedNoInternetAdvertise", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "Deprovisioned" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteAdvertise": { - "description": "Whether to do express route advertise.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "geo": { - "description": "The Geo for CIDR advertising. Should be an Geo code.", - "oneOf": [ - { - "enum": [ - "GLOBAL", - "AFRI", - "APAC", - "EURO", - "LATAM", - "NAM", - "ME", - "OCEANIA", - "AQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "Type of custom IP prefix. Should be Singular, Parent, or Child.", - "oneOf": [ - { - "enum": [ - "Singular", - "Parent", - "Child" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": {}, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionMode": { - "description": "The DDoS protection mode of the public IP", - "oneOf": [ - { - "enum": [ - "VirtualNetworkInherited", - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DelegationProperties": { - "description": "Properties of the delegation.", - "properties": { - "serviceName": { - "description": "The service name to which the NVA is delegated.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "allowNonVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from non Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "billingType": { - "description": "The billing type of the ExpressRoutePort resource.", - "oneOf": [ - { - "enum": [ - "MeteredData", - "UnlimitedData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyHttpHeaderToInsert": { - "description": "name and value of HTTP/S header to insert", - "properties": { - "headerName": { - "description": "Contains the name of the header", - "type": "string" - }, - "headerValue": { - "description": "Contains the value of the header", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpHeadersToInsert": { - "description": "List of HTTP/S headers to insert.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyHttpHeaderToInsert" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GroupByUserSession": { - "description": "Define user session identifier group by clauses.", - "properties": { - "groupByVariables": { - "description": "List of group by clause variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "groupByVariables" - ], - "type": "object" - }, - "GroupByVariable": { - "description": "Define user session group by clause variables.", - "properties": { - "variableName": { - "description": "User Session clause variable.", - "oneOf": [ - { - "enum": [ - "ClientAddr", - "GeoLocation", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPRule": { - "properties": { - "addressPrefix": { - "description": "Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.", - "type": "string" - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "action": { - "description": "Describes the override action to be applied when rule matches.", - "oneOf": [ - { - "enum": [ - "AnomalyScoring", - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Uppercase", - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating", - "AcceleratedConnections" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "auxiliarySku": { - "description": "Auxiliary sku of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "A1", - "A2", - "A4", - "A8" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTcpStateTracking": { - "description": "Indicates whether to disable tcp state tracking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "additionalNics": { - "description": "Details required for Additional Network Interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualApplianceAdditionalNicProperties" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegation": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/DelegationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "partnerManagedResource": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/PartnerManagedResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN. Microsoft private, public and IANA reserved ASN are not supported.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Parameter": { - "description": "Parameters for an Action.", - "properties": { - "asPath": { - "description": "List of AS paths.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PartnerManagedResourceProperties": { - "description": "Properties of the partner managed resource.", - "properties": {}, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "customBlockResponseBody": { - "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding.", - "oneOf": [ - { - "maxLength": 32768, - "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customBlockResponseStatusCode": { - "description": "If the action type is block, customer can override the response status code.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadEnforcement": { - "description": "Whether allow WAF to enforce file upload limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logScrubbing": { - "description": "To scrub sensitive log fields", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettingsLogScrubbing" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyEnforcement": { - "description": "Whether allow WAF to enforce request body limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyInspectLimitInKB": { - "description": "Max inspection limit in KB for request body inspection for WAF.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PolicySettingsLogScrubbing": { - "description": "To scrub sensitive log fields", - "properties": { - "scrubbingRules": { - "description": "The rules that are applied to the logs for scrubbing.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallScrubbingRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "State of the log scrubbing config. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeThreshold": { - "description": "The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "domainNameLabelScope": { - "description": "The domain name label scope. If a domain name label and a domain name label scope are specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system with a hashed value includes in FQDN.", - "oneOf": [ - { - "enum": [ - "TenantReuse", - "SubscriptionReuse", - "ResourceGroupReuse", - "NoReuse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RouteMapProperties": { - "description": "Properties of RouteMap resource", - "properties": { - "associatedInboundConnections": { - "description": "List of connections which have this RoutMap associated for inbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "associatedOutboundConnections": { - "description": "List of connections which have this RoutMap associated for outbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of RouteMap rules to be applied.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteMapRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteMapRule": { - "description": "A RouteMap Rule.", - "properties": { - "actions": { - "description": "List of actions which will be applied on a match.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Action" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCriteria": { - "description": "List of matching criterion which will be applied to traffic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Criterion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the rule.", - "type": "string" - }, - "nextStepIfMatched": { - "description": "Next step after rule is evaluated. Current supported behaviors are 'Continue'(to next rule) and 'Terminate'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Continue", - "Terminate" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundRouteMap": { - "description": "The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRouteMap": { - "description": "The resource id of theRouteMap associated with this RoutingConfiguration for outbound advertised routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All", - "AllowRulesOnly" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnectionConfiguration for static routes on this HubVnetConnection.", - "properties": { - "vnetLocalRouteOverrideCriteria": { - "description": "Parameter determining whether NVA in spoke vnet is bypassed for traffic with destination in spoke.", - "oneOf": [ - { - "enum": [ - "Contains", - "Equal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIPConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultOutboundAccess": { - "description": "Set this property to false to disable default outbound connectivity for all VMs in the subnet. This property can only be set at the time of subnet creation and cannot be updated for an existing subnet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SwapResourceProperties": { - "description": "Swap resource properties", - "properties": { - "slotType": { - "description": "Specifies slot info on a cloud service", - "oneOf": [ - { - "enum": [ - "Production", - "Staging" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceAdditionalNicProperties": { - "description": "Network Virtual Appliance Additional NIC properties.", - "properties": { - "hasPublicIp": { - "description": "Flag (true or false) for Intent for Public Ip on additional nic", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of additional nic", - "type": "string" - } - }, - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayAutoScaleBounds": { - "properties": { - "max": { - "description": "Maximum Scale Units for Autoscale configuration", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum scale Units for Autoscale configuration", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayAutoScaleConfiguration": { - "description": "Virtual Network Gateway Autoscale Configuration details", - "properties": { - "bounds": { - "description": "The bounds of the autoscale configuration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayAutoScaleBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroup": { - "description": "Parameters for VirtualNetworkGatewayPolicyGroup.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of tVirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupMember": { - "description": "Vpn Client Connection configuration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupProperties": { - "description": "Properties of VirtualNetworkGatewayPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VirtualNetworkGatewayPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "isDefault", - "priority", - "policyMembers" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "adminState": { - "description": "Property to indicate if the Express Route Gateway serves traffic when there are multiple Express Route Gateways in the vnet", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetTraffic": { - "description": "Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity to Azure Virtual WAN.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from remote Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Autoscale configuration for virutal network gateway", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "virtualNetworkGatewayPolicyGroups": { - "description": "The reference to the VirtualNetworkGatewayPolicyGroup resource which represents the available VirtualNetworkGatewayPolicyGroup for the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "staticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnection.", - "oneOf": [ - { - "$ref": "#/definitions/StaticRoutesConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfiguration": { - "description": "A vpn client connection configuration for client connection configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VngClientConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfigurationProperties": { - "description": "Properties of VngClientConnectionConfiguration.", - "properties": { - "virtualNetworkGatewayPolicyGroups": { - "description": "List of references to virtualNetworkGatewayPolicyGroups", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "vpnClientAddressPool", - "virtualNetworkGatewayPolicyGroups" - ], - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vngClientConnectionConfigurations": { - "description": "per ip address pool connection policy for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VngClientConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "groupByUserSession": { - "description": "List of user session identifier group by clauses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByUserSession" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitDuration": { - "description": "Duration over which Rate Limit policy will be applied. Applies only when ruleType is RateLimitRule.", - "oneOf": [ - { - "enum": [ - "OneMin", - "FiveMins" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitThreshold": { - "description": "Rate Limit threshold to apply in case ruleType is RateLimitRule. Must be greater than or equal to 1", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "RateLimitRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "WebApplicationFirewallScrubbingRules": { - "description": "Allow certain variables to be scrubbed on WAF logs", - "properties": { - "matchVariable": { - "description": "The variable to be scrubbed from the logs.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestPostArgNames", - "RequestJSONArgNames", - "RequestIPAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Defines the state of log scrubbing rule. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps_childResource": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-05-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2023-06-01/Microsoft.Network.NRP.json b/schemas/2023-06-01/Microsoft.Network.NRP.json deleted file mode 100644 index 86b7ef8856..0000000000 --- a/schemas/2023-06-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,25935 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_networkVirtualApplianceConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_networkVirtualApplianceConnections": { - "description": "Microsoft.Network/networkVirtualAppliances/networkVirtualApplianceConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the NVA connection.", - "oneOf": [ - { - "pattern": "^[A-Za-z0-9_]+", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualApplianceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/networkVirtualApplianceConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeMaps_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "extension_resourceDefinitions": { - "cloudServiceSlots": { - "description": "Microsoft.Network/cloudServiceSlots", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "swap" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Swap resource properties", - "oneOf": [ - { - "$ref": "#/definitions/SwapResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/cloudServiceSlots" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "Action": { - "description": "Action to be taken on a route matching a RouteMap criterion.", - "properties": { - "parameters": { - "description": "List of parameters relevant to the action.For instance if type is drop then parameters has list of prefixes to be dropped.If type is add, parameters would have list of ASN numbers to be added", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Parameter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of action to be taken. Supported types are 'Remove', 'Add', 'Replace', and 'Drop.'", - "oneOf": [ - { - "enum": [ - "Unknown", - "Remove", - "Add", - "Replace", - "Drop" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "verifyClientRevocation": { - "description": "Verify client certificate revocation status.", - "oneOf": [ - { - "enum": [ - "None", - "OCSP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Custom error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway custom error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway custom error.", - "oneOf": [ - { - "enum": [ - "HttpStatus400", - "HttpStatus403", - "HttpStatus404", - "HttpStatus405", - "HttpStatus408", - "HttpStatus500", - "HttpStatus502", - "HttpStatus503", - "HttpStatus504" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostNames": { - "description": "List of Server Name Indications(SNI) for TLS Multi-site Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Basic, Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "syncMode": { - "description": "Backend address synchronous mode for the backend pool", - "oneOf": [ - { - "enum": [ - "Automatic", - "Manual" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "A reference to a virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableKerberos": { - "description": "Enable/Disable Kerberos feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkAcls": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormatNetworkAcls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network required for Developer Bastion Host only.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostPropertiesFormatNetworkAcls": { - "properties": { - "ipRules": { - "description": "Sets the IP ACL rules for Developer Bastion Host.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Criterion": { - "description": "A matching criteria which matches routes based on route prefix, community, and AS path.", - "properties": { - "asPath": { - "description": "List of AS paths which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCondition": { - "description": "Match condition to apply RouteMap rules.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Contains", - "Equals", - "NotContains", - "NotEquals" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "asn": { - "description": "The ASN for CIDR advertising. Should be an integer as string.", - "type": "string" - }, - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "CommissionedNoInternetAdvertise", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "Deprovisioned" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteAdvertise": { - "description": "Whether to do express route advertise.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "geo": { - "description": "The Geo for CIDR advertising. Should be an Geo code.", - "oneOf": [ - { - "enum": [ - "GLOBAL", - "AFRI", - "APAC", - "EURO", - "LATAM", - "NAM", - "ME", - "OCEANIA", - "AQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "Type of custom IP prefix. Should be Singular, Parent, or Child.", - "oneOf": [ - { - "enum": [ - "Singular", - "Parent", - "Child" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": {}, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionMode": { - "description": "The DDoS protection mode of the public IP", - "oneOf": [ - { - "enum": [ - "VirtualNetworkInherited", - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DelegationProperties": { - "description": "Properties of the delegation.", - "properties": { - "serviceName": { - "description": "The service name to which the NVA is delegated.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "allowNonVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from non Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "billingType": { - "description": "The billing type of the ExpressRoutePort resource.", - "oneOf": [ - { - "enum": [ - "MeteredData", - "UnlimitedData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyHttpHeaderToInsert": { - "description": "name and value of HTTP/S header to insert", - "properties": { - "headerName": { - "description": "Contains the name of the header", - "type": "string" - }, - "headerValue": { - "description": "Contains the value of the header", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state. When attached to a parent policy, the firewall's effective IDPS mode is the stricter mode of the two.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "profile": { - "description": "IDPS profile name. When attached to a parent policy, the firewall's effective profile is the profile name of the parent policy.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Advanced", - "Extended" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpHeadersToInsert": { - "description": "List of HTTP/S headers to insert.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyHttpHeaderToInsert" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GroupByUserSession": { - "description": "Define user session identifier group by clauses.", - "properties": { - "groupByVariables": { - "description": "List of group by clause variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "groupByVariables" - ], - "type": "object" - }, - "GroupByVariable": { - "description": "Define user session group by clause variables.", - "properties": { - "variableName": { - "description": "User Session clause variable.", - "oneOf": [ - { - "enum": [ - "ClientAddr", - "GeoLocation", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPRule": { - "properties": { - "addressPrefix": { - "description": "Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.", - "type": "string" - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "InternetIngressPublicIpsProperties": { - "description": "Resource Uri of Public Ip for Standard Load Balancer Frontend End.", - "properties": { - "id": { - "description": "Resource Uri of Public Ip", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "action": { - "description": "Describes the override action to be applied when rule matches.", - "oneOf": [ - { - "enum": [ - "AnomalyScoring", - "Allow", - "Block", - "Log", - "JSChallenge" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Uppercase", - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating", - "AcceleratedConnections" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "auxiliarySku": { - "description": "Auxiliary sku of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "A1", - "A2", - "A4", - "A8" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTcpStateTracking": { - "description": "Indicates whether to disable tcp state tracking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualApplianceConnectionProperties": { - "description": "Properties of the NetworkVirtualApplianceConnection subresource.", - "properties": { - "asn": { - "description": "Network Virtual Appliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeerAddress": { - "description": "List of bgpPeerAddresses for the NVA instances", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tunnelIdentifier": { - "description": "Unique identifier for the connection.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "additionalNics": { - "description": "Details required for Additional Network Interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualApplianceAdditionalNicProperties" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegation": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/DelegationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internetIngressPublicIps": { - "description": "List of Resource Uri of Public IPs for Internet Ingress Scenario.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InternetIngressPublicIpsProperties" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "partnerManagedResource": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/PartnerManagedResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN. Microsoft private, public and IANA reserved ASN are not supported.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Parameter": { - "description": "Parameters for an Action.", - "properties": { - "asPath": { - "description": "List of AS paths.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PartnerManagedResourceProperties": { - "description": "Properties of the partner managed resource.", - "properties": {}, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "customBlockResponseBody": { - "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding.", - "oneOf": [ - { - "maxLength": 32768, - "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customBlockResponseStatusCode": { - "description": "If the action type is block, customer can override the response status code.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadEnforcement": { - "description": "Whether allow WAF to enforce file upload limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logScrubbing": { - "description": "To scrub sensitive log fields", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettingsLogScrubbing" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyEnforcement": { - "description": "Whether allow WAF to enforce request body limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyInspectLimitInKB": { - "description": "Max inspection limit in KB for request body inspection for WAF.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PolicySettingsLogScrubbing": { - "description": "To scrub sensitive log fields", - "properties": { - "scrubbingRules": { - "description": "The rules that are applied to the logs for scrubbing.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallScrubbingRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "State of the log scrubbing config. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeThreshold": { - "description": "The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "domainNameLabelScope": { - "description": "The domain name label scope. If a domain name label and a domain name label scope are specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system with a hashed value includes in FQDN.", - "oneOf": [ - { - "enum": [ - "TenantReuse", - "SubscriptionReuse", - "ResourceGroupReuse", - "NoReuse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RouteMapProperties": { - "description": "Properties of RouteMap resource", - "properties": { - "associatedInboundConnections": { - "description": "List of connections which have this RoutMap associated for inbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "associatedOutboundConnections": { - "description": "List of connections which have this RoutMap associated for outbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of RouteMap rules to be applied.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteMapRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteMapRule": { - "description": "A RouteMap Rule.", - "properties": { - "actions": { - "description": "List of actions which will be applied on a match.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Action" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCriteria": { - "description": "List of matching criterion which will be applied to traffic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Criterion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the rule.", - "type": "string" - }, - "nextStepIfMatched": { - "description": "Next step after rule is evaluated. Current supported behaviors are 'Continue'(to next rule) and 'Terminate'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Continue", - "Terminate" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundRouteMap": { - "description": "The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRouteMap": { - "description": "The resource id of theRouteMap associated with this RoutingConfiguration for outbound advertised routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All", - "AllowRulesOnly" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Developer" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnectionConfiguration for static routes on this HubVnetConnection.", - "properties": { - "vnetLocalRouteOverrideCriteria": { - "description": "Parameter determining whether NVA in spoke vnet is bypassed for traffic with destination in spoke.", - "oneOf": [ - { - "enum": [ - "Contains", - "Equal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIPConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultOutboundAccess": { - "description": "Set this property to false to disable default outbound connectivity for all VMs in the subnet. This property can only be set at the time of subnet creation and cannot be updated for an existing subnet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SwapResourceProperties": { - "description": "Swap resource properties", - "properties": { - "slotType": { - "description": "Specifies slot info on a cloud service", - "oneOf": [ - { - "enum": [ - "Production", - "Staging" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceAdditionalNicProperties": { - "description": "Network Virtual Appliance Additional NIC properties.", - "properties": { - "hasPublicIp": { - "description": "Flag (true or false) for Intent for Public Ip on additional nic", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of additional nic", - "type": "string" - } - }, - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayAutoScaleBounds": { - "properties": { - "max": { - "description": "Maximum Scale Units for Autoscale configuration", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum scale Units for Autoscale configuration", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayAutoScaleConfiguration": { - "description": "Virtual Network Gateway Autoscale Configuration details", - "properties": { - "bounds": { - "description": "The bounds of the autoscale configuration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayAutoScaleBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroup": { - "description": "Parameters for VirtualNetworkGatewayPolicyGroup.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of tVirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupMember": { - "description": "Vpn Client Connection configuration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupProperties": { - "description": "Properties of VirtualNetworkGatewayPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VirtualNetworkGatewayPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "isDefault", - "priority", - "policyMembers" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "adminState": { - "description": "Property to indicate if the Express Route Gateway serves traffic when there are multiple Express Route Gateways in the vnet", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetTraffic": { - "description": "Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity to Azure Virtual WAN.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from remote Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Autoscale configuration for virutal network gateway", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "virtualNetworkGatewayPolicyGroups": { - "description": "The reference to the VirtualNetworkGatewayPolicyGroup resource which represents the available VirtualNetworkGatewayPolicyGroup for the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ", - "ErGwScale" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ", - "ErGwScale" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "staticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnection.", - "oneOf": [ - { - "$ref": "#/definitions/StaticRoutesConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfiguration": { - "description": "A vpn client connection configuration for client connection configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VngClientConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfigurationProperties": { - "description": "Properties of VngClientConnectionConfiguration.", - "properties": { - "virtualNetworkGatewayPolicyGroups": { - "description": "List of references to virtualNetworkGatewayPolicyGroups", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "vpnClientAddressPool", - "virtualNetworkGatewayPolicyGroups" - ], - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vngClientConnectionConfigurations": { - "description": "per ip address pool connection policy for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VngClientConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log", - "JSChallenge" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "groupByUserSession": { - "description": "List of user session identifier group by clauses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByUserSession" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitDuration": { - "description": "Duration over which Rate Limit policy will be applied. Applies only when ruleType is RateLimitRule.", - "oneOf": [ - { - "enum": [ - "OneMin", - "FiveMins" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitThreshold": { - "description": "Rate Limit threshold to apply in case ruleType is RateLimitRule. Must be greater than or equal to 1", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "RateLimitRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "WebApplicationFirewallScrubbingRules": { - "description": "Allow certain variables to be scrubbed on WAF logs", - "properties": { - "matchVariable": { - "description": "The variable to be scrubbed from the logs.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestPostArgNames", - "RequestJSONArgNames", - "RequestIPAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Defines the state of log scrubbing rule. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_networkVirtualApplianceConnections_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/networkVirtualApplianceConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the NVA connection.", - "oneOf": [ - { - "pattern": "^[A-Za-z0-9_]+", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualApplianceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkVirtualApplianceConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps_childResource": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-06-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2023-07-01-preview/Microsoft.Network.NRP.json b/schemas/2023-07-01-preview/Microsoft.Network.NRP.json deleted file mode 100644 index c0eefabcf3..0000000000 --- a/schemas/2023-07-01-preview/Microsoft.Network.NRP.json +++ /dev/null @@ -1,753 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2023-07-01-preview/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "networkSecurityPerimeters": { - "description": "Microsoft.Network/networkSecurityPerimeters", - "properties": { - "apiVersion": { - "enum": [ - "2023-07-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security perimeter.", - "type": "string" - }, - "properties": { - "description": "The network security perimeter properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityPerimeterProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityPerimeters_links_childResource" - }, - { - "$ref": "#/definitions/networkSecurityPerimeters_profiles_childResource" - }, - { - "$ref": "#/definitions/networkSecurityPerimeters_resourceAssociations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_links": { - "description": "Microsoft.Network/networkSecurityPerimeters/links", - "properties": { - "apiVersion": { - "enum": [ - "2023-07-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the NSP link.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter link resource.", - "oneOf": [ - { - "$ref": "#/definitions/NspLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/links" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles", - "properties": { - "apiVersion": { - "enum": [ - "2023-07-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP profile.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter profile", - "oneOf": [ - { - "$ref": "#/definitions/NspProfileProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityPerimeters_profiles_accessRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/profiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles_accessRules": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles/accessRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-07-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP access rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP access rule.", - "oneOf": [ - { - "$ref": "#/definitions/NspAccessRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/profiles/accessRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_resourceAssociations": { - "description": "Microsoft.Network/networkSecurityPerimeters/resourceAssociations", - "properties": { - "apiVersion": { - "enum": [ - "2023-07-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP association.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP resource association.", - "oneOf": [ - { - "$ref": "#/definitions/NspAssociationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/resourceAssociations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "NetworkSecurityPerimeterProperties": { - "description": "Properties of network security perimeter.", - "properties": {}, - "type": "object" - }, - "NspAccessRuleProperties": { - "description": "Properties of NSP access rule.", - "properties": { - "addressPrefixes": { - "description": "Inbound address prefixes (IPv4/IPv6)", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "Direction that specifies whether the access rules is inbound/outbound.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "emailAddresses": { - "description": "Outbound rules email address format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fullyQualifiedDomainNames": { - "description": "Outbound rules fully qualified domain name format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "phoneNumbers": { - "description": "Outbound rules phone number format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscription ids", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubscriptionId" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NspAssociationProperties": { - "properties": { - "accessMode": { - "description": "Access mode on the association.", - "oneOf": [ - { - "enum": [ - "Learning", - "Enforced", - "Audit" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkResource": { - "description": "The PaaS resource to be associated.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "profile": { - "description": "Profile id to which the PaaS resource is associated.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NspLinkProperties": { - "description": "Properties of NSP Link resource.", - "properties": { - "autoApprovedRemotePerimeterResourceId": { - "description": "Perimeter ARM Id for the remote NSP with which the link gets created in Auto-approval mode. It should be used when the NSP admin have Microsoft.Network/networkSecurityPerimeters/linkPerimeter/action permission on the remote NSP resource.", - "type": "string" - }, - "description": { - "description": "A message passed to the owner of the remote NSP link resource with this connection request. In case of Auto-approved flow, it is default to 'Auto Approved'. Restricted to 140 chars.", - "type": "string" - }, - "localInboundProfiles": { - "description": "Local Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteInboundProfiles": { - "description": "Remote Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles. This property can only be updated in auto-approval mode.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NspProfileProperties": { - "description": "Properties of NSP profile.", - "properties": {}, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "SubscriptionId": { - "properties": { - "id": { - "description": "Subscription id in the ARM id format.", - "type": "string" - } - }, - "type": "object" - }, - "networkSecurityPerimeters_links_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/links", - "properties": { - "apiVersion": { - "enum": [ - "2023-07-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the NSP link.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter link resource.", - "oneOf": [ - { - "$ref": "#/definitions/NspLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "links" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles_accessRules_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles/accessRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-07-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP access rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP access rule.", - "oneOf": [ - { - "$ref": "#/definitions/NspAccessRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "accessRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles", - "properties": { - "apiVersion": { - "enum": [ - "2023-07-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP profile.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter profile", - "oneOf": [ - { - "$ref": "#/definitions/NspProfileProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "profiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_resourceAssociations_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/resourceAssociations", - "properties": { - "apiVersion": { - "enum": [ - "2023-07-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP association.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP resource association.", - "oneOf": [ - { - "$ref": "#/definitions/NspAssociationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "resourceAssociations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2023-08-01-preview/Microsoft.Network.NRP.json b/schemas/2023-08-01-preview/Microsoft.Network.NRP.json deleted file mode 100644 index 42ac59ba53..0000000000 --- a/schemas/2023-08-01-preview/Microsoft.Network.NRP.json +++ /dev/null @@ -1,767 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2023-08-01-preview/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "networkSecurityPerimeters": { - "description": "Microsoft.Network/networkSecurityPerimeters", - "properties": { - "apiVersion": { - "enum": [ - "2023-08-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security perimeter.", - "type": "string" - }, - "properties": { - "description": "The network security perimeter properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityPerimeterProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityPerimeters_links_childResource" - }, - { - "$ref": "#/definitions/networkSecurityPerimeters_profiles_childResource" - }, - { - "$ref": "#/definitions/networkSecurityPerimeters_resourceAssociations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_links": { - "description": "Microsoft.Network/networkSecurityPerimeters/links", - "properties": { - "apiVersion": { - "enum": [ - "2023-08-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the NSP link.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter link resource.", - "oneOf": [ - { - "$ref": "#/definitions/NspLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/links" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles", - "properties": { - "apiVersion": { - "enum": [ - "2023-08-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP profile.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter profile", - "oneOf": [ - { - "$ref": "#/definitions/NspProfileProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityPerimeters_profiles_accessRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/profiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles_accessRules": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles/accessRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-08-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP access rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP access rule.", - "oneOf": [ - { - "$ref": "#/definitions/NspAccessRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/profiles/accessRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_resourceAssociations": { - "description": "Microsoft.Network/networkSecurityPerimeters/resourceAssociations", - "properties": { - "apiVersion": { - "enum": [ - "2023-08-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP association.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP resource association.", - "oneOf": [ - { - "$ref": "#/definitions/NspAssociationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityPerimeters/resourceAssociations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "NetworkSecurityPerimeterProperties": { - "description": "Properties of network security perimeter.", - "properties": {}, - "type": "object" - }, - "NspAccessRuleProperties": { - "description": "Properties of NSP access rule.", - "properties": { - "addressPrefixes": { - "description": "Inbound address prefixes (IPv4/IPv6)", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "Direction that specifies whether the access rules is inbound/outbound.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "emailAddresses": { - "description": "Outbound rules email address format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fullyQualifiedDomainNames": { - "description": "Outbound rules fully qualified domain name format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "phoneNumbers": { - "description": "Outbound rules phone number format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceTags": { - "description": "Inbound rules service tag names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscription ids", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubscriptionId" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NspAssociationProperties": { - "properties": { - "accessMode": { - "description": "Access mode on the association.", - "oneOf": [ - { - "enum": [ - "Learning", - "Enforced", - "Audit" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkResource": { - "description": "The PaaS resource to be associated.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "profile": { - "description": "Profile id to which the PaaS resource is associated.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NspLinkProperties": { - "description": "Properties of NSP Link resource.", - "properties": { - "autoApprovedRemotePerimeterResourceId": { - "description": "Perimeter ARM Id for the remote NSP with which the link gets created in Auto-approval mode. It should be used when the NSP admin have Microsoft.Network/networkSecurityPerimeters/linkPerimeter/action permission on the remote NSP resource.", - "type": "string" - }, - "description": { - "description": "A message passed to the owner of the remote NSP link resource with this connection request. In case of Auto-approved flow, it is default to 'Auto Approved'. Restricted to 140 chars.", - "type": "string" - }, - "localInboundProfiles": { - "description": "Local Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteInboundProfiles": { - "description": "Remote Inbound profile names to which Inbound is allowed. Use ['*'] to allow inbound to all profiles. This property can only be updated in auto-approval mode.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NspProfileProperties": { - "description": "Properties of NSP profile.", - "properties": {}, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "SubscriptionId": { - "properties": { - "id": { - "description": "Subscription id in the ARM id format.", - "type": "string" - } - }, - "type": "object" - }, - "networkSecurityPerimeters_links_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/links", - "properties": { - "apiVersion": { - "enum": [ - "2023-08-01-preview" - ], - "type": "string" - }, - "name": { - "description": "The name of the NSP link.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter link resource.", - "oneOf": [ - { - "$ref": "#/definitions/NspLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "links" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles_accessRules_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles/accessRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-08-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP access rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP access rule.", - "oneOf": [ - { - "$ref": "#/definitions/NspAccessRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "accessRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_profiles_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/profiles", - "properties": { - "apiVersion": { - "enum": [ - "2023-08-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP profile.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security perimeter profile", - "oneOf": [ - { - "$ref": "#/definitions/NspProfileProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "profiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityPerimeters_resourceAssociations_childResource": { - "description": "Microsoft.Network/networkSecurityPerimeters/resourceAssociations", - "properties": { - "apiVersion": { - "enum": [ - "2023-08-01-preview" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the NSP association.", - "type": "string" - }, - "properties": { - "description": "Properties of the NSP resource association.", - "oneOf": [ - { - "$ref": "#/definitions/NspAssociationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "resourceAssociations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2023-09-01/Microsoft.Network.NRP.json b/schemas/2023-09-01/Microsoft.Network.NRP.json deleted file mode 100644 index 205de93414..0000000000 --- a/schemas/2023-09-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,25951 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_networkVirtualApplianceConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_networkVirtualApplianceConnections": { - "description": "Microsoft.Network/networkVirtualAppliances/networkVirtualApplianceConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the NVA connection.", - "oneOf": [ - { - "pattern": "^[A-Za-z0-9_]+", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualApplianceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/networkVirtualApplianceConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeMaps_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "extension_resourceDefinitions": { - "cloudServiceSlots": { - "description": "Microsoft.Network/cloudServiceSlots", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "swap" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Swap resource properties", - "oneOf": [ - { - "$ref": "#/definitions/SwapResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/cloudServiceSlots" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "Action": { - "description": "Action to be taken on a route matching a RouteMap criterion.", - "properties": { - "parameters": { - "description": "List of parameters relevant to the action.For instance if type is drop then parameters has list of prefixes to be dropped.If type is add, parameters would have list of ASN numbers to be added", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Parameter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of action to be taken. Supported types are 'Remove', 'Add', 'Replace', and 'Drop.'", - "oneOf": [ - { - "enum": [ - "Unknown", - "Remove", - "Add", - "Replace", - "Drop" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "verifyClientRevocation": { - "description": "Verify client certificate revocation status.", - "oneOf": [ - { - "enum": [ - "None", - "OCSP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Custom error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway custom error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway custom error.", - "oneOf": [ - { - "enum": [ - "HttpStatus400", - "HttpStatus403", - "HttpStatus404", - "HttpStatus405", - "HttpStatus408", - "HttpStatus500", - "HttpStatus502", - "HttpStatus503", - "HttpStatus504" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostNames": { - "description": "List of Server Name Indications(SNI) for TLS Multi-site Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Basic, Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "syncMode": { - "description": "Backend address synchronous mode for the backend pool", - "oneOf": [ - { - "enum": [ - "Automatic", - "Manual" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "A reference to a virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableKerberos": { - "description": "Enable/Disable Kerberos feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkAcls": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormatNetworkAcls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network required for Developer Bastion Host only.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostPropertiesFormatNetworkAcls": { - "properties": { - "ipRules": { - "description": "Sets the IP ACL rules for Developer Bastion Host.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint (IP or domain name).", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter for sub-items within the endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Criterion": { - "description": "A matching criteria which matches routes based on route prefix, community, and AS path.", - "properties": { - "asPath": { - "description": "List of AS paths which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCondition": { - "description": "Match condition to apply RouteMap rules.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Contains", - "Equals", - "NotContains", - "NotEquals" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "asn": { - "description": "The ASN for CIDR advertising. Should be an integer as string.", - "type": "string" - }, - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "CommissionedNoInternetAdvertise", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "Deprovisioned" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteAdvertise": { - "description": "Whether to do express route advertise.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "geo": { - "description": "The Geo for CIDR advertising. Should be an Geo code.", - "oneOf": [ - { - "enum": [ - "GLOBAL", - "AFRI", - "APAC", - "EURO", - "LATAM", - "NAM", - "ME", - "OCEANIA", - "AQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "Type of custom IP prefix. Should be Singular, Parent, or Child.", - "oneOf": [ - { - "enum": [ - "Singular", - "Parent", - "Child" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": {}, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionMode": { - "description": "The DDoS protection mode of the public IP", - "oneOf": [ - { - "enum": [ - "VirtualNetworkInherited", - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DelegationProperties": { - "description": "Properties of the delegation.", - "properties": { - "serviceName": { - "description": "The service name to which the NVA is delegated.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "allowNonVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from non Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "billingType": { - "description": "The billing type of the ExpressRoutePort resource.", - "oneOf": [ - { - "enum": [ - "MeteredData", - "UnlimitedData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyHttpHeaderToInsert": { - "description": "name and value of HTTP/S header to insert", - "properties": { - "headerName": { - "description": "Contains the name of the header", - "type": "string" - }, - "headerValue": { - "description": "Contains the value of the header", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state. When attached to a parent policy, the firewall's effective IDPS mode is the stricter mode of the two.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "profile": { - "description": "IDPS profile name. When attached to a parent policy, the firewall's effective profile is the profile name of the parent policy.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Advanced", - "Extended" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpHeadersToInsert": { - "description": "List of HTTP/S headers to insert.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyHttpHeaderToInsert" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GroupByUserSession": { - "description": "Define user session identifier group by clauses.", - "properties": { - "groupByVariables": { - "description": "List of group by clause variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "groupByVariables" - ], - "type": "object" - }, - "GroupByVariable": { - "description": "Define user session group by clause variables.", - "properties": { - "variableName": { - "description": "User Session clause variable.", - "oneOf": [ - { - "enum": [ - "ClientAddr", - "GeoLocation", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPRule": { - "properties": { - "addressPrefix": { - "description": "Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.", - "type": "string" - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Only /30, /31 and /32 Ip ranges are allowed.", - "type": "string" - } - }, - "type": "object" - }, - "InternetIngressPublicIpsProperties": { - "description": "Resource Uri of Public Ip for Standard Load Balancer Frontend End.", - "properties": { - "id": { - "description": "Resource Uri of Public Ip", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "action": { - "description": "Describes the override action to be applied when rule matches.", - "oneOf": [ - { - "enum": [ - "AnomalyScoring", - "Allow", - "Block", - "Log", - "JSChallenge" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Uppercase", - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating", - "AcceleratedConnections" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "auxiliarySku": { - "description": "Auxiliary sku of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "A1", - "A2", - "A4", - "A8" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTcpStateTracking": { - "description": "Indicates whether to disable tcp state tracking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualApplianceConnectionProperties": { - "description": "Properties of the NetworkVirtualApplianceConnection subresource.", - "properties": { - "asn": { - "description": "Network Virtual Appliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeerAddress": { - "description": "List of bgpPeerAddresses for the NVA instances", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tunnelIdentifier": { - "description": "Unique identifier for the connection.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "additionalNics": { - "description": "Details required for Additional Network Interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualApplianceAdditionalNicProperties" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegation": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/DelegationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internetIngressPublicIps": { - "description": "List of Resource Uri of Public IPs for Internet Ingress Scenario.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InternetIngressPublicIpsProperties" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "partnerManagedResource": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/PartnerManagedResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN. Microsoft private, public and IANA reserved ASN are not supported.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no local file path is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Parameter": { - "description": "Parameters for an Action.", - "properties": { - "asPath": { - "description": "List of AS paths.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PartnerManagedResourceProperties": { - "description": "Properties of the partner managed resource.", - "properties": {}, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "customBlockResponseBody": { - "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding.", - "oneOf": [ - { - "maxLength": 32768, - "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customBlockResponseStatusCode": { - "description": "If the action type is block, customer can override the response status code.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadEnforcement": { - "description": "Whether allow WAF to enforce file upload limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logScrubbing": { - "description": "To scrub sensitive log fields", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettingsLogScrubbing" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyEnforcement": { - "description": "Whether allow WAF to enforce request body limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyInspectLimitInKB": { - "description": "Max inspection limit in KB for request body inspection for WAF.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PolicySettingsLogScrubbing": { - "description": "To scrub sensitive log fields", - "properties": { - "scrubbingRules": { - "description": "The rules that are applied to the logs for scrubbing.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallScrubbingRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "State of the log scrubbing config. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeThreshold": { - "description": "The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "domainNameLabelScope": { - "description": "The domain name label scope. If a domain name label and a domain name label scope are specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system with a hashed value includes in FQDN.", - "oneOf": [ - { - "enum": [ - "TenantReuse", - "SubscriptionReuse", - "ResourceGroupReuse", - "NoReuse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RouteMapProperties": { - "description": "Properties of RouteMap resource", - "properties": { - "associatedInboundConnections": { - "description": "List of connections which have this RoutMap associated for inbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "associatedOutboundConnections": { - "description": "List of connections which have this RoutMap associated for outbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of RouteMap rules to be applied.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteMapRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteMapRule": { - "description": "A RouteMap Rule.", - "properties": { - "actions": { - "description": "List of actions which will be applied on a match.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Action" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCriteria": { - "description": "List of matching criterion which will be applied to traffic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Criterion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the rule.", - "type": "string" - }, - "nextStepIfMatched": { - "description": "Next step after rule is evaluated. Current supported behaviors are 'Continue'(to next rule) and 'Terminate'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Continue", - "Terminate" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundRouteMap": { - "description": "The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRouteMap": { - "description": "The resource id of theRouteMap associated with this RoutingConfiguration for outbound advertised routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All", - "AllowRulesOnly" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Developer" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnectionConfiguration for static routes on this HubVnetConnection.", - "properties": { - "vnetLocalRouteOverrideCriteria": { - "description": "Parameter determining whether NVA in spoke vnet is bypassed for traffic with destination in spoke.", - "oneOf": [ - { - "enum": [ - "Contains", - "Equal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIPConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultOutboundAccess": { - "description": "Set this property to false to disable default outbound connectivity for all VMs in the subnet. This property can only be set at the time of subnet creation and cannot be updated for an existing subnet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled", - "NetworkSecurityGroupEnabled", - "RouteTableEnabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SwapResourceProperties": { - "description": "Swap resource properties", - "properties": { - "slotType": { - "description": "Specifies slot info on a cloud service", - "oneOf": [ - { - "enum": [ - "Production", - "Staging" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceAdditionalNicProperties": { - "description": "Network Virtual Appliance Additional NIC properties.", - "properties": { - "hasPublicIp": { - "description": "Flag (true or false) for Intent for Public Ip on additional nic", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of additional nic", - "type": "string" - } - }, - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayAutoScaleBounds": { - "properties": { - "max": { - "description": "Maximum Scale Units for Autoscale configuration", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum scale Units for Autoscale configuration", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayAutoScaleConfiguration": { - "description": "Virtual Network Gateway Autoscale Configuration details", - "properties": { - "bounds": { - "description": "The bounds of the autoscale configuration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayAutoScaleBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroup": { - "description": "Parameters for VirtualNetworkGatewayPolicyGroup.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of tVirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupMember": { - "description": "Vpn Client Connection configuration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupProperties": { - "description": "Properties of VirtualNetworkGatewayPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VirtualNetworkGatewayPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "isDefault", - "priority", - "policyMembers" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "adminState": { - "description": "Property to indicate if the Express Route Gateway serves traffic when there are multiple Express Route Gateways in the vnet", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetTraffic": { - "description": "Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity to Azure Virtual WAN.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from remote Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Autoscale configuration for virutal network gateway", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "virtualNetworkGatewayPolicyGroups": { - "description": "The reference to the VirtualNetworkGatewayPolicyGroup resource which represents the available VirtualNetworkGatewayPolicyGroup for the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ", - "ErGwScale" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ", - "ErGwScale" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "staticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnection.", - "oneOf": [ - { - "$ref": "#/definitions/StaticRoutesConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfiguration": { - "description": "A vpn client connection configuration for client connection configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VngClientConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfigurationProperties": { - "description": "Properties of VngClientConnectionConfiguration.", - "properties": { - "virtualNetworkGatewayPolicyGroups": { - "description": "List of references to virtualNetworkGatewayPolicyGroups", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "vpnClientAddressPool", - "virtualNetworkGatewayPolicyGroups" - ], - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vngClientConnectionConfigurations": { - "description": "per ip address pool connection policy for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VngClientConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log", - "JSChallenge" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "groupByUserSession": { - "description": "List of user session identifier group by clauses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByUserSession" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitDuration": { - "description": "Duration over which Rate Limit policy will be applied. Applies only when ruleType is RateLimitRule.", - "oneOf": [ - { - "enum": [ - "OneMin", - "FiveMins" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitThreshold": { - "description": "Rate Limit threshold to apply in case ruleType is RateLimitRule. Must be greater than or equal to 1", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "RateLimitRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "WebApplicationFirewallScrubbingRules": { - "description": "Allow certain variables to be scrubbed on WAF logs", - "properties": { - "matchVariable": { - "description": "The variable to be scrubbed from the logs.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestPostArgNames", - "RequestJSONArgNames", - "RequestIPAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Defines the state of log scrubbing rule. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_networkVirtualApplianceConnections_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/networkVirtualApplianceConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the NVA connection.", - "oneOf": [ - { - "pattern": "^[A-Za-z0-9_]+", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualApplianceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkVirtualApplianceConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps_childResource": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-09-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/2023-11-01/Microsoft.Network.NRP.json b/schemas/2023-11-01/Microsoft.Network.NRP.json deleted file mode 100644 index 9f13103be8..0000000000 --- a/schemas/2023-11-01/Microsoft.Network.NRP.json +++ /dev/null @@ -1,26828 +0,0 @@ -{ - "id": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#", - "title": "Microsoft.Network", - "description": "Microsoft Network Resource Types", - "$schema": "http://json-schema.org/draft-04/schema#", - "resourceDefinitions": { - "ApplicationGatewayWebApplicationFirewallPolicies": { - "description": "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the policy.", - "maxLength": 128, - "type": "string" - }, - "properties": { - "description": "Properties of the web application firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/WebApplicationFirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ExpressRoutePorts": { - "description": "Microsoft.Network/ExpressRoutePorts", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of ExpressRoutePort, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoutePort resource.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRoutePorts_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ExpressRoutePorts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "IpAllocations": { - "description": "Microsoft.Network/IpAllocations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the IpAllocation.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpAllocation.", - "oneOf": [ - { - "$ref": "#/definitions/IpAllocationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/IpAllocations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways": { - "description": "Microsoft.Network/applicationGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the application gateway, if configured.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/applicationGateways_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationGateways/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "applicationSecurityGroups": { - "description": "Microsoft.Network/applicationSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the application security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/applicationSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "azureFirewalls": { - "description": "Microsoft.Network/azureFirewalls", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Azure Firewall.", - "maxLength": 56, - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/azureFirewalls" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "bastionHosts": { - "description": "Microsoft.Network/bastionHosts", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Bastion Host.", - "type": "string" - }, - "properties": { - "description": "Represents the bastion host resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The sku of this Bastion Host.", - "oneOf": [ - { - "$ref": "#/definitions/Sku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/bastionHosts" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting where the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "connections": { - "description": "Microsoft.Network/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway connection.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "customIpPrefixes": { - "description": "Microsoft.Network/customIpPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the custom IP prefix.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the custom IP prefix.", - "type": "string" - }, - "properties": { - "description": "Custom IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/CustomIpPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/customIpPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosCustomPolicies": { - "description": "Microsoft.Network/ddosCustomPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS custom policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS custom policy.", - "oneOf": [ - { - "$ref": "#/definitions/DdosCustomPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosCustomPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ddosProtectionPlans": { - "description": "Microsoft.Network/ddosProtectionPlans", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the DDoS protection plan.", - "type": "string" - }, - "properties": { - "description": "Properties of the DDoS protection plan.", - "oneOf": [ - { - "$ref": "#/definitions/DdosProtectionPlanPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ddosProtectionPlans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "dscpConfigurations": { - "description": "Microsoft.Network/dscpConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/DscpConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/dscpConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits": { - "description": "Microsoft.Network/expressRouteCircuits", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the circuit.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_childResource" - }, - { - "$ref": "#/definitions/expressRouteCircuits_authorizations_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The SKU.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCircuits_peerings_connections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCircuits/peerings/connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections": { - "description": "Microsoft.Network/expressRouteCrossConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRouteCrossConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteCrossConnections_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteCrossConnections/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways": { - "description": "Microsoft.Network/expressRouteGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ExpressRoute gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/expressRouteGateways_expressRouteConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRouteGateways/expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/expressRoutePorts/authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies": { - "description": "Microsoft.Network/firewallPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The identity of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Firewall Policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_signatureOverrides_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_childResource" - }, - { - "$ref": "#/definitions/firewallPolicies_firewallPolicyDrafts_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_firewallPolicyDrafts": { - "description": "Microsoft.Network/firewallPolicies/firewallPolicyDrafts", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyDraftProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/firewallPolicyDrafts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/firewallPolicies_ruleCollectionGroups_ruleCollectionGroupDrafts_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_ruleCollectionGroupDrafts": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups/ruleCollectionGroupDrafts", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupDraftProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/ruleCollectionGroups/ruleCollectionGroupDrafts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "pattern": "^.*/default$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/firewallPolicies/signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "ipGroups": { - "description": "Microsoft.Network/ipGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the ipGroups.", - "type": "string" - }, - "properties": { - "description": "Properties of the IpGroups.", - "oneOf": [ - { - "$ref": "#/definitions/IpGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/ipGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers": { - "description": "Microsoft.Network/loadBalancers", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the load balancer.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/loadBalancers_inboundNatRules_childResource" - }, - { - "$ref": "#/definitions/loadBalancers_backendAddressPools_childResource" - } - ] - }, - "type": "array" - }, - "sku": { - "description": "The load balancer SKU.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/loadBalancers/inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "localNetworkGateways": { - "description": "Microsoft.Network/localNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the local network gateway.", - "minLength": 1, - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/localNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "natGateways": { - "description": "Microsoft.Network/natGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the nat gateway.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/natGateways" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces": { - "description": "Microsoft.Network/networkInterfaces", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network interface.", - "type": "string" - }, - "properties": { - "description": "Properties of the network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfacePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkInterfaces_tapConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkInterfaces/tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers": { - "description": "Microsoft.Network/networkManagers", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network manager.", - "type": "string" - }, - "properties": { - "description": "The network manager properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_childResource" - }, - { - "$ref": "#/definitions/networkManagers_scopeConnections_childResource" - }, - { - "$ref": "#/definitions/networkManagers_connectivityConfigurations_childResource" - }, - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_networkGroups_staticMembers_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/networkGroups/staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource" - } - ] - }, - "type": "array" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkProfiles": { - "description": "Microsoft.Network/networkProfiles", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network profile.", - "type": "string" - }, - "properties": { - "description": "Network profile properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkProfiles" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups": { - "description": "Microsoft.Network/networkSecurityGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network security group.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkSecurityGroups_securityRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkSecurityGroups/securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances": { - "description": "Microsoft.Network/networkVirtualAppliances", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "The service principal that has read access to cloud-init and config blob.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of Network Virtual Appliance.", - "type": "string" - }, - "properties": { - "description": "Properties of the Network Virtual Appliance.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkVirtualAppliances_inboundSecurityRules_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_virtualApplianceSites_childResource" - }, - { - "$ref": "#/definitions/networkVirtualAppliances_networkVirtualApplianceConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_networkVirtualApplianceConnections": { - "description": "Microsoft.Network/networkVirtualAppliances/networkVirtualApplianceConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the NVA connection.", - "oneOf": [ - { - "pattern": "^[A-Za-z0-9_]+", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualApplianceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/networkVirtualApplianceConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers": { - "description": "Microsoft.Network/networkWatchers", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the network watcher.", - "type": "string" - }, - "properties": { - "description": "Properties of the network watcher.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkWatcherPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/networkWatchers_flowLogs_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_packetCaptures_childResource" - }, - { - "$ref": "#/definitions/networkWatchers_connectionMonitors_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "FlowLog resource Managed Identity", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkWatchers/packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "p2svpnGateways": { - "description": "Microsoft.Network/p2svpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnGateway.", - "oneOf": [ - { - "$ref": "#/definitions/P2SVpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/p2svpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints": { - "description": "Microsoft.Network/privateEndpoints", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private endpoint.", - "type": "string" - }, - "properties": { - "description": "Properties of the private endpoint.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateEndpoints_privateDnsZoneGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateEndpoints/privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices": { - "description": "Microsoft.Network/privateLinkServices", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the private link service.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/privateLinkServices_privateEndpointConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/privateLinkServices/privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPAddresses": { - "description": "Microsoft.Network/publicIPAddresses", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP address.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPAddresses" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "publicIPPrefixes": { - "description": "Microsoft.Network/publicIPPrefixes", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the public IP prefix.", - "type": "string" - }, - "properties": { - "description": "Public IP prefix properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP prefix SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPPrefixSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/publicIPPrefixes" - ], - "type": "string" - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters": { - "description": "Microsoft.Network/routeFilters", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeFilters_routeFilterRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeFilters/routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables": { - "description": "Microsoft.Network/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route table.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/routeTables_routes_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/routeTables/routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "securityPartnerProviders": { - "description": "Microsoft.Network/securityPartnerProviders", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Security Partner Provider.", - "type": "string" - }, - "properties": { - "description": "Properties of the Security Partner Provider.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityPartnerProviderPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/securityPartnerProviders" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies": { - "description": "Microsoft.Network/serviceEndpointPolicies", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs": { - "description": "Microsoft.Network/virtualHubs", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHub.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualHubs_routeMaps_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routeTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_routingIntent_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_bgpConnections_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubRouteTables_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_ipConfigurations_childResource" - }, - { - "$ref": "#/definitions/virtualHubs_hubVirtualNetworkConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualHubs/routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways": { - "description": "Microsoft.Network/virtualNetworkGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworkGateways_natRules_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkTaps": { - "description": "Microsoft.Network/virtualNetworkTaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network tap.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworkTaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks": { - "description": "Microsoft.Network/virtualNetworks", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "extendedLocation": { - "description": "The extended location of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the virtual network.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualNetworks_subnets_childResource" - }, - { - "$ref": "#/definitions/virtualNetworks_virtualNetworkPeerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualNetworks/virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters": { - "description": "Microsoft.Network/virtualRouters", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Router.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/virtualRouters_peerings_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualRouters/peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualWans": { - "description": "Microsoft.Network/virtualWans", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualWAN being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual WAN.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualWanProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/virtualWans" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways": { - "description": "Microsoft.Network/vpnGateways", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnGateways_natRules_childResource" - }, - { - "$ref": "#/definitions/vpnGateways_vpnConnections_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnGateways/vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations": { - "description": "Microsoft.Network/vpnServerConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnServerConfiguration being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2SVpnServer configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resources": { - "items": { - "oneOf": [ - { - "$ref": "#/definitions/vpnServerConfigurations_configurationPolicyGroups_childResource" - } - ] - }, - "type": "array" - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnSites": { - "description": "Microsoft.Network/vpnSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the VpnSite being created or updated.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/vpnSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "subscription_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "managementGroup_resourceDefinitions": { - "networkManagerConnections": { - "description": "Microsoft.Network/networkManagerConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the network manager connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/networkManagerConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "extension_resourceDefinitions": { - "cloudServiceSlots": { - "description": "Microsoft.Network/cloudServiceSlots", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "swap" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Swap resource properties", - "oneOf": [ - { - "$ref": "#/definitions/SwapResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "Microsoft.Network/cloudServiceSlots" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - }, - "definitions": { - "AadAuthenticationParameters": { - "description": "AAD Vpn authentication type related parameters.", - "properties": { - "aadAudience": { - "description": "AAD Vpn authentication parameter AAD audience.", - "type": "string" - }, - "aadIssuer": { - "description": "AAD Vpn authentication parameter AAD issuer.", - "type": "string" - }, - "aadTenant": { - "description": "AAD Vpn authentication parameter AAD tenant.", - "type": "string" - } - }, - "type": "object" - }, - "Action": { - "description": "Action to be taken on a route matching a RouteMap criterion.", - "properties": { - "parameters": { - "description": "List of parameters relevant to the action.For instance if type is drop then parameters has list of prefixes to be dropped.If type is add, parameters would have list of ASN numbers to be added", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Parameter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Type of action to be taken. Supported types are 'Remove', 'Add', 'Replace', and 'Drop.'", - "oneOf": [ - { - "enum": [ - "Unknown", - "Remove", - "Add", - "Replace", - "Drop" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AddressSpace": { - "description": "AddressSpace contains an array of IP address ranges that can be used by subnets of the virtual network.", - "properties": { - "addressPrefixes": { - "description": "A list of address blocks reserved for this virtual network in CIDR notation.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AdminRuleCollectionPropertiesFormat": { - "description": "Defines the admin rule collection properties.", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/NetworkManagerSecurityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the admin rule collection.", - "type": "string" - } - }, - "required": [ - "appliesToGroups" - ], - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificate": { - "description": "Authentication certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the authentication certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway authentication certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayAuthenticationCertificatePropertiesFormat": { - "description": "Authentication certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayAutoscaleConfiguration": { - "description": "Application Gateway autoscale configuration.", - "properties": { - "maxCapacity": { - "description": "Upper bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minCapacity": { - "description": "Lower bound on number of Application Gateway capacity.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "minCapacity" - ], - "type": "object" - }, - "ApplicationGatewayBackendAddress": { - "description": "Backend address of an application gateway.", - "properties": { - "fqdn": { - "description": "Fully qualified domain name (FQDN).", - "type": "string" - }, - "ipAddress": { - "description": "IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPool": { - "description": "Backend Address Pool of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend address pool that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendAddressPoolPropertiesFormat": { - "description": "Properties of Backend Address Pool of an application gateway.", - "properties": { - "backendAddresses": { - "description": "Backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend http settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend HTTP settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendHttpSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "affinityCookieName": { - "description": "Cookie name to use for the affinity cookie.", - "type": "string" - }, - "authenticationCertificates": { - "description": "Array of references to application gateway authentication certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionDraining": { - "description": "Connection draining of the backend http settings resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayConnectionDraining" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cookieBasedAffinity": { - "description": "Cookie based affinity.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host header to be sent to the backend servers.", - "type": "string" - }, - "path": { - "description": "Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick host header should be picked from the host name of the backend server. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeEnabled": { - "description": "Whether the probe is enabled. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestTimeout": { - "description": "Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettings": { - "description": "Backend address pool settings of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the backend settings that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway backend settings.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayBackendSettingsPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayBackendSettingsPropertiesFormat": { - "description": "Properties of Backend address pool settings of an application gateway.", - "properties": { - "hostName": { - "description": "Server name indication to be sent to the backend servers for Tls protocol.", - "type": "string" - }, - "pickHostNameFromBackendAddress": { - "description": "Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The destination port on the backend.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "Probe resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used to communicate with the backend.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Array of references to application gateway trusted root certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayClientAuthConfiguration": { - "description": "Application gateway client authentication configuration.", - "properties": { - "verifyClientCertIssuerDN": { - "description": "Verify client certificate issuer name on the application gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "verifyClientRevocation": { - "description": "Verify client certificate revocation status.", - "oneOf": [ - { - "enum": [ - "None", - "OCSP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayConnectionDraining": { - "description": "Connection draining allows open connections to a backend server to be active for a specified time after the backend server got removed from the configuration.", - "properties": { - "drainTimeoutInSec": { - "description": "The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.", - "oneOf": [ - { - "maximum": 3600, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether connection draining is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled", - "drainTimeoutInSec" - ], - "type": "object" - }, - "ApplicationGatewayCustomError": { - "description": "Custom error of an application gateway.", - "properties": { - "customErrorPageUrl": { - "description": "Error page URL of the application gateway custom error.", - "type": "string" - }, - "statusCode": { - "description": "Status code of the application gateway custom error.", - "oneOf": [ - { - "enum": [ - "HttpStatus400", - "HttpStatus403", - "HttpStatus404", - "HttpStatus405", - "HttpStatus408", - "HttpStatus500", - "HttpStatus502", - "HttpStatus503", - "HttpStatus504" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFirewallDisabledRuleGroup": { - "description": "Allows to disable rules within a rule group or an entire rule group.", - "properties": { - "ruleGroupName": { - "description": "The name of the rule group that will be disabled.", - "type": "string" - }, - "rules": { - "description": "The list of rules that will be disabled. If null, all rules of the rule group will be disabled.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ApplicationGatewayFirewallExclusion": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "matchVariable": { - "description": "The variable to be excluded.", - "type": "string" - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "type": "string" - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "ApplicationGatewayFrontendIPConfiguration": { - "description": "Frontend IP configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP configuration of an application gateway.", - "properties": { - "privateIPAddress": { - "description": "PrivateIPAddress of the network interface IP Configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfiguration": { - "description": "Reference to the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference to the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPort": { - "description": "Frontend port of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the frontend port that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway frontend port.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayFrontendPortPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayFrontendPortPropertiesFormat": { - "description": "Properties of Frontend port of an application gateway.", - "properties": { - "port": { - "description": "Frontend port.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayGlobalConfiguration": { - "description": "Application Gateway global configuration.", - "properties": { - "enableRequestBuffering": { - "description": "Enable request buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableResponseBuffering": { - "description": "Enable response buffering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHeaderConfiguration": { - "description": "Header configuration of the Actions set in Application Gateway.", - "properties": { - "headerName": { - "description": "Header name of the header configuration.", - "type": "string" - }, - "headerValue": { - "description": "Header value of the header configuration.", - "type": "string" - }, - "headerValueMatcher": { - "description": "An optional field under \"Rewrite Action\". It lets you capture and modify the value(s) of a specific header when multiple headers with the same name exist. Currently supported for Set-Cookie Response header only. For more details, visit https://aka.ms/appgwheadercrud", - "oneOf": [ - { - "$ref": "#/definitions/HeaderValueMatcher" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListener": { - "description": "Http listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the HTTP listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway HTTP listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayHttpListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayHttpListenerPropertiesFormat": { - "description": "Properties of HTTP listener of an application gateway.", - "properties": { - "customErrorConfigurations": { - "description": "Custom error configurations of the HTTP listener.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostName": { - "description": "Host name of HTTP listener.", - "type": "string" - }, - "hostNames": { - "description": "List of Host names for HTTP Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the HTTP listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireServerNameIndication": { - "description": "Applicable only if protocol is https. Enables SNI for multi-hosting.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfiguration": { - "description": "IP configuration of an application gateway. Currently 1 public and 1 private IP configuration is allowed.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the IP configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an application gateway.", - "properties": { - "subnet": { - "description": "Reference to the subnet resource. A subnet from where application gateway gets its private address.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListener": { - "description": "Listener of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the listener that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway listener.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayListenerPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayListenerPropertiesFormat": { - "description": "Properties of listener of an application gateway.", - "properties": { - "frontendIPConfiguration": { - "description": "Frontend IP configuration resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "Frontend port resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostNames": { - "description": "List of Server Name Indications(SNI) for TLS Multi-site Listener that allows special wildcard characters as well.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of the listener.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificate": { - "description": "SSL certificate resource of an application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfile": { - "description": "SSL profile resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicy": { - "description": "Load Distribution Policy of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution policy.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionPolicyPropertiesFormat": { - "description": "Properties of Load Distribution Policy of an application gateway.", - "properties": { - "loadDistributionAlgorithm": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "enum": [ - "RoundRobin", - "LeastConnections", - "IpHash" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionTargets": { - "description": "Load Distribution Targets resource of an application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTarget" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTarget": { - "description": "Load Distribution Target of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the load distribution policy that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway load distribution target.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionTargetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayLoadDistributionTargetPropertiesFormat": { - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "weightPerServer": { - "description": "Weight per server. Range between 1 and 100.", - "oneOf": [ - { - "maximum": 100, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRule": { - "description": "Path rule of URL path map of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the path rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway path rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPathRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPathRulePropertiesFormat": { - "description": "Properties of path rule of an application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "paths": { - "description": "Path rules of URL path map.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite rule set resource of URL path map path rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateEndpointConnectionProperties": { - "description": "Properties of Private Link Resource of an application gateway.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfiguration": { - "description": "Private Link Configuration on an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the private link configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private link configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkConfigurationProperties": { - "description": "Properties of private link configuration on an application gateway.", - "properties": { - "ipConfigurations": { - "description": "An array of application gateway private link ip configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfiguration": { - "description": "The application gateway private link ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of application gateway private link ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of an application gateway private link ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPrivateLinkIpConfigurationProperties": { - "description": "Properties of an application gateway private link IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbe": { - "description": "Probe of the application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the probe that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway probe.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbeHealthResponseMatch": { - "description": "Application gateway probe health response match.", - "properties": { - "body": { - "description": "Body that must be contained in the health response. Default value is empty.", - "type": "string" - }, - "statusCodes": { - "description": "Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayProbePropertiesFormat": { - "description": "Properties of probe of an application gateway.", - "properties": { - "host": { - "description": "Host name to send the probe to.", - "type": "string" - }, - "interval": { - "description": "The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "match": { - "description": "Criterion for classifying a healthy probe response.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayProbeHealthResponseMatch" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minServers": { - "description": "Minimum number of servers that are always marked healthy. Default value is 0.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "Relative path of probe. Valid path starts from '/'. Probe is sent to ://:.", - "type": "string" - }, - "pickHostNameFromBackendHttpSettings": { - "description": "Whether the host header should be picked from the backend http settings. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pickHostNameFromBackendSettings": { - "description": "Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Basic, Standard_v2 and WAF_v2 only.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol used for the probe.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Tcp", - "Tls" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeout": { - "description": "The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "unhealthyThreshold": { - "description": "The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayPropertiesFormat": { - "description": "Properties of the application gateway.", - "properties": { - "authenticationCertificates": { - "description": "Authentication certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayAuthenticationCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoscaleConfiguration": { - "description": "Autoscale Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayAutoscaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "Backend address pool of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettingsCollection": { - "description": "Backend http settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendHttpSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettingsCollection": { - "description": "Backend settings of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayBackendSettings" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customErrorConfigurations": { - "description": "Custom error configurations of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayCustomError" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFips": { - "description": "Whether FIPS is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableHttp2": { - "description": "Whether HTTP2 is enabled on the application gateway resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "Reference to the FirewallPolicy resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "forceFirewallPolicyAssociation": { - "description": "If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Frontend IP addresses of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPorts": { - "description": "Frontend ports of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFrontendPort" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayIPConfigurations": { - "description": "Subnets of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "globalConfiguration": { - "description": "Global Configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayGlobalConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListeners": { - "description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHttpListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listeners": { - "description": "Listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayListener" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicies": { - "description": "Load distribution policies of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayLoadDistributionPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkConfigurations": { - "description": "PrivateLink configurations on application gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPrivateLinkConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Probes of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayProbe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfigurations": { - "description": "Redirect configurations of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRedirectConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSets": { - "description": "Rewrite rules for the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRules": { - "description": "Routing rules of the application gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRoutingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "SKU of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslCertificates": { - "description": "SSL certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslProfiles": { - "description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewaySslProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Trusted client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedRootCertificates": { - "description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMaps": { - "description": "URL path map of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits).", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayUrlPathMap" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webApplicationFirewallConfiguration": { - "description": "Web application firewall configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayWebApplicationFirewallConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfiguration": { - "description": "Redirect configuration of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the redirect configuration that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway redirect configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRedirectConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRedirectConfigurationPropertiesFormat": { - "description": "Properties of redirect configuration of the application gateway.", - "properties": { - "includePath": { - "description": "Include path in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "includeQueryString": { - "description": "Include query string in the redirected url.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rules specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectType": { - "description": "HTTP redirection type.", - "oneOf": [ - { - "enum": [ - "Permanent", - "Found", - "SeeOther", - "Temporary" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestRoutingRules": { - "description": "Request routing specifying redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetListener": { - "description": "Reference to a listener to redirect the request to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrl": { - "description": "Url to redirect the request to.", - "type": "string" - }, - "urlPathMaps": { - "description": "Url path maps specifying default redirect configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRule": { - "description": "Request routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the request routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway request routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRequestRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRequestRoutingRulePropertiesFormat": { - "description": "Properties of request routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendHttpSettings": { - "description": "Backend http settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpListener": { - "description": "Http listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistributionPolicy": { - "description": "Load Distribution Policy resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the request routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "redirectConfiguration": { - "description": "Redirect configuration resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rewriteRuleSet": { - "description": "Rewrite Rule Set resource in Basic rule of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlPathMap": { - "description": "URL path map resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRule": { - "description": "Rewrite rule of an application gateway.", - "properties": { - "actionSet": { - "description": "Set of actions to be done as part of the rewrite Rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleActionSet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "conditions": { - "description": "Conditions based on which the action set execution will be evaluated.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rewrite rule that is unique within an Application Gateway.", - "type": "string" - }, - "ruleSequence": { - "description": "Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleActionSet": { - "description": "Set of actions in the Rewrite Rule in Application Gateway.", - "properties": { - "requestHeaderConfigurations": { - "description": "Request Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "responseHeaderConfigurations": { - "description": "Response Header Actions in the Action Set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayHeaderConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "urlConfiguration": { - "description": "Url Configuration Action in the Action Set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleCondition": { - "description": "Set of conditions in the Rewrite Rule in Application Gateway.", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.", - "type": "string" - }, - "variable": { - "description": "The condition parameter of the RewriteRuleCondition.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSet": { - "description": "Rewrite rule set of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the rewrite rule set that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway rewrite rule set.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRewriteRuleSetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRewriteRuleSetPropertiesFormat": { - "description": "Properties of rewrite rule set of the application gateway.", - "properties": { - "rewriteRules": { - "description": "Rewrite rules in the rewrite rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayRewriteRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRule": { - "description": "Routing rule of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the routing rule that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway routing rule.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayRoutingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayRoutingRulePropertiesFormat": { - "description": "Properties of routing rule of the application gateway.", - "properties": { - "backendAddressPool": { - "description": "Backend address pool resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendSettings": { - "description": "Backend settings resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "listener": { - "description": "Listener resource of the application gateway.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the routing rule.", - "oneOf": [ - { - "maximum": 20000, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "Rule type.", - "oneOf": [ - { - "enum": [ - "Basic", - "PathBasedRouting" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority" - ], - "type": "object" - }, - "ApplicationGatewaySku": { - "description": "SKU of an application gateway.", - "properties": { - "capacity": { - "description": "Capacity (instance count) of an application gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "family": { - "description": "Family of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Generation_1", - "Generation_2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of an application gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard_Small", - "Standard_Medium", - "Standard_Large", - "WAF_Medium", - "WAF_Large", - "Standard_v2", - "WAF_v2", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an application gateway.", - "oneOf": [ - { - "enum": [ - "Standard", - "WAF", - "Standard_v2", - "WAF_v2", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificate": { - "description": "SSL certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of an application gateway.", - "properties": { - "data": { - "description": "Base-64 encoded pfx certificate. Only applicable in PUT Request.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "password": { - "description": "Password for the pfx file specified in data. Only applicable in PUT request.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewaySslPolicy": { - "description": "Application Gateway Ssl policy.", - "properties": { - "cipherSuites": { - "description": "Ssl cipher suites to be enabled in the specified order to application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", - "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", - "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_AES_256_GCM_SHA384", - "TLS_RSA_WITH_AES_128_GCM_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA256", - "TLS_RSA_WITH_AES_128_CBC_SHA256", - "TLS_RSA_WITH_AES_256_CBC_SHA", - "TLS_RSA_WITH_AES_128_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", - "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", - "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", - "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", - "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", - "TLS_RSA_WITH_3DES_EDE_CBC_SHA", - "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disabledSslProtocols": { - "description": "Ssl protocols to be disabled on application gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "minProtocolVersion": { - "description": "Minimum version of Ssl protocol to be supported on application gateway.", - "oneOf": [ - { - "enum": [ - "TLSv1_0", - "TLSv1_1", - "TLSv1_2", - "TLSv1_3" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyName": { - "description": "Name of Ssl predefined policy.", - "oneOf": [ - { - "enum": [ - "AppGwSslPolicy20150501", - "AppGwSslPolicy20170401", - "AppGwSslPolicy20170401S", - "AppGwSslPolicy20220101", - "AppGwSslPolicy20220101S" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyType": { - "description": "Type of Ssl Policy.", - "oneOf": [ - { - "enum": [ - "Predefined", - "Custom", - "CustomV2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfile": { - "description": "SSL profile of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the SSL profile that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway SSL profile.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewaySslProfilePropertiesFormat": { - "description": "Properties of SSL profile of an application gateway.", - "properties": { - "clientAuthConfiguration": { - "description": "Client authentication configuration of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sslPolicy": { - "description": "SSL policy of the application gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewaySslPolicy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trustedClientCertificates": { - "description": "Array of references to application gateway trusted client certificates.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificate": { - "description": "Trusted client certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted client certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted client certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedClientCertificatePropertiesFormat": { - "description": "Trusted client certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificate": { - "description": "Trusted Root certificates of an application gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the trusted root certificate that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway trusted root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayTrustedRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayTrustedRootCertificatePropertiesFormat": { - "description": "Trusted Root certificates properties of an application gateway.", - "properties": { - "data": { - "description": "Certificate public data.", - "type": "string" - }, - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - } - }, - "type": "object" - }, - "ApplicationGatewayUrlConfiguration": { - "description": "Url configuration of the Actions set in Application Gateway.", - "properties": { - "modifiedPath": { - "description": "Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.", - "type": "string" - }, - "modifiedQueryString": { - "description": "Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.", - "type": "string" - }, - "reroute": { - "description": "If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMap": { - "description": "UrlPathMaps give a url path to the backend mapping information for PathBasedRouting.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the URL path map that is unique within an Application Gateway.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayUrlPathMapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayUrlPathMapPropertiesFormat": { - "description": "Properties of UrlPathMap of the application gateway.", - "properties": { - "defaultBackendAddressPool": { - "description": "Default backend address pool resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultBackendHttpSettings": { - "description": "Default backend http settings resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultLoadDistributionPolicy": { - "description": "Default Load Distribution Policy resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRedirectConfiguration": { - "description": "Default redirect configuration resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultRewriteRuleSet": { - "description": "Default Rewrite rule set resource of URL path map.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pathRules": { - "description": "Path rule of URL path map resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayPathRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationGatewayWebApplicationFirewallConfiguration": { - "description": "Application gateway web application firewall configuration.", - "properties": { - "disabledRuleGroups": { - "description": "The disabled rule groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallDisabledRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Whether the web application firewall is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "exclusions": { - "description": "The exclusion list.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayFirewallExclusion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallMode": { - "description": "Web application firewall mode.", - "oneOf": [ - { - "enum": [ - "Detection", - "Prevention" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySize": { - "description": "Maximum request body size for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "maximum": 128, - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "The type of the web application firewall rule set. Possible values are: 'OWASP'.", - "type": "string" - }, - "ruleSetVersion": { - "description": "The version of the rule set type.", - "type": "string" - } - }, - "required": [ - "enabled", - "firewallMode", - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ApplicationSecurityGroup": { - "description": "An application security group in a resource group.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the application security group.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ApplicationSecurityGroupPropertiesFormat": { - "description": "Application security group properties.", - "properties": {}, - "type": "object" - }, - "AuthorizationPropertiesFormat": { - "description": "Properties of ExpressRouteCircuitAuthorization.", - "properties": { - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "authorizationUseStatus": { - "description": "The authorization use status.", - "oneOf": [ - { - "enum": [ - "Available", - "InUse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRule": { - "description": "Properties of an application rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the application rule.", - "type": "string" - }, - "protocols": { - "description": "Array of ApplicationRuleProtocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollection": { - "description": "Application rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall application rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleCollectionPropertiesFormat": { - "description": "Properties of the application rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the application rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a application rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallApplicationRuleProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000. This field is optional.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https", - "Mssql" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfiguration": { - "description": "IP configuration of an Azure Firewall.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Azure Firewall.", - "properties": { - "publicIPAddress": { - "description": "Reference to the PublicIP resource. This field is a mandatory input if subnet is not null.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to the subnet resource. This resource must be named 'AzureFirewallSubnet' or 'AzureFirewallManagementSubnet'.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRCAction": { - "description": "AzureFirewall NAT Rule Collection Action.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Snat", - "Dnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRule": { - "description": "Properties of a NAT rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses for this rule. Supports IP ranges, prefixes, and service tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the NAT rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols applicable to this NAT rule.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollection": { - "description": "NAT rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRuleCollectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNatRuleCollectionProperties": { - "description": "Properties of the NAT rule collection.", - "properties": { - "action": { - "description": "The action type of a NAT rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNatRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the NAT rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a NAT rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRule": { - "description": "Properties of the network rule.", - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the network rule.", - "type": "string" - }, - "protocols": { - "description": "Array of AzureFirewallNetworkRuleProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollection": { - "description": "Network rule collection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the Azure firewall. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the azure firewall network rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallNetworkRuleCollectionPropertiesFormat": { - "description": "Properties of the network rule collection.", - "properties": { - "action": { - "description": "The action type of a rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallRCAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority of the network rule collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "Collection of rules used by a network rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPropertiesFormat": { - "description": "Properties of the Azure Firewall.", - "properties": { - "additionalProperties": { - "description": "The additional properties used to further config this azure firewall.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationRuleCollections": { - "description": "Collection of application rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallApplicationRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "firewallPolicy": { - "description": "The firewallPolicy associated with this azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubIPAddresses": { - "description": "IP addresses associated with AzureFirewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Azure Firewall resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managementIpConfiguration": { - "description": "IP configuration of the Azure Firewall used for management traffic.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRuleCollections": { - "description": "Collection of NAT rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNatRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkRuleCollections": { - "description": "Collection of network rule collections used by Azure Firewall.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallNetworkRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Azure Firewall Resource SKU.", - "oneOf": [ - { - "$ref": "#/definitions/AzureFirewallSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the firewall belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallPublicIPAddress": { - "description": "Public IP Address associated with azure firewall.", - "properties": { - "address": { - "description": "Public IP Address value.", - "type": "string" - } - }, - "type": "object" - }, - "AzureFirewallRCAction": { - "description": "Properties of the AzureFirewallRCAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "AzureFirewallSku": { - "description": "SKU of an Azure Firewall.", - "properties": { - "name": { - "description": "Name of an Azure Firewall SKU.", - "oneOf": [ - { - "enum": [ - "AZFW_VNet", - "AZFW_Hub" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of an Azure Firewall.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPool": { - "description": "Pool of backend IP addresses.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BackendAddressPoolPropertiesFormat": { - "description": "Properties of the backend address pool.", - "properties": { - "drainPeriodInSeconds": { - "description": "Amount of seconds Load Balancer waits for before sending RESET to client and backend address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddresses": { - "description": "An array of backend addresses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancerBackendAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "The location of the backend address pool.", - "type": "string" - }, - "syncMode": { - "description": "Backend address synchronous mode for the backend pool", - "oneOf": [ - { - "enum": [ - "Automatic", - "Manual" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tunnelInterfaces": { - "description": "An array of gateway load balancer tunnel interfaces.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayLoadBalancerTunnelInterface" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "A reference to a virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfiguration": { - "description": "IP configuration of an Bastion Host.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Represents the ip configuration associated with the resource.", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration of an Bastion Host.", - "properties": { - "privateIPAllocationMethod": { - "description": "Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Reference of the PublicIP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference of the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "subnet", - "publicIPAddress" - ], - "type": "object" - }, - "BastionHostPropertiesFormat": { - "description": "Properties of the Bastion Host.", - "properties": { - "disableCopyPaste": { - "description": "Enable/Disable Copy/Paste feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsName": { - "description": "FQDN for the endpoint on which bastion host is accessible.", - "type": "string" - }, - "enableFileCopy": { - "description": "Enable/Disable File Copy feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIpConnect": { - "description": "Enable/Disable IP Connect feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableKerberos": { - "description": "Enable/Disable Kerberos feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableShareableLink": { - "description": "Enable/Disable Shareable Link of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTunneling": { - "description": "Enable/Disable Tunneling feature of the Bastion Host resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configuration of the Bastion Host resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BastionHostIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkAcls": { - "description": "", - "oneOf": [ - { - "$ref": "#/definitions/BastionHostPropertiesFormatNetworkAcls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scaleUnits": { - "description": "The scale units for the Bastion Host resource.", - "oneOf": [ - { - "maximum": 50, - "minimum": 2, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network required for Developer Bastion Host only.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BastionHostPropertiesFormatNetworkAcls": { - "properties": { - "ipRules": { - "description": "Sets the IP ACL rules for Developer Bastion Host.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BgpConnectionProperties": { - "description": "Properties of the bgp connection.", - "properties": { - "hubVirtualNetworkConnection": { - "description": "The reference to the HubVirtualNetworkConnection resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "BgpSettings": { - "description": "BGP settings details.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - }, - "bgpPeeringAddresses": { - "description": "BGP peering address with IP configuration ID for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationBgpPeeringAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerWeight": { - "description": "The weight added to routes learned from this BGP speaker.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "BreakOutCategoryPolicies": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "allow": { - "description": "Flag to control breakout of o365 allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control breakout of o365 default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control breakout of o365 optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties": { - "properties": {}, - "type": "object" - }, - "ConnectionMonitorDestination": { - "description": "Describes the destination of connection monitor.", - "properties": { - "address": { - "description": "Address of the connection monitor destination (IP or domain name).", - "type": "string" - }, - "port": { - "description": "The destination port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the destination by connection monitor.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpoint": { - "description": "Describes the connection monitor endpoint.", - "properties": { - "address": { - "description": "Address of the connection monitor endpoint. Supported for AzureVM, ExternalAddress, ArcMachine, MMAWorkspaceMachine endpoint type.", - "type": "string" - }, - "coverageLevel": { - "description": "Test coverage for the endpoint.", - "oneOf": [ - { - "enum": [ - "Default", - "Low", - "BelowAverage", - "Average", - "AboveAverage", - "Full" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filter": { - "description": "Filter field is getting deprecated and should not be used. Instead use Include/Exclude scope fields for it.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointFilter" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "locationDetails": { - "description": "Location details is optional and only being used for 'AzureArcNetwork' type endpoints, which contains region details.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointLocationDetails" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor endpoint.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID of the connection monitor endpoint are supported for AzureVM, AzureVMSS, AzureVNet, AzureSubnet, MMAWorkspaceMachine, MMAWorkspaceNetwork, AzureArcVM endpoint type.", - "type": "string" - }, - "scope": { - "description": "Endpoint scope defines which target resource to monitor in case of compound resource endpoints like VMSS, AzureSubnet, AzureVNet, MMAWorkspaceNetwork, AzureArcNetwork.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorEndpointScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptionId": { - "description": "Subscription ID for connection monitor endpoint. It's an optional parameter which is being used for 'AzureArcNetwork' type endpoint.", - "type": "string" - }, - "type": { - "description": "The endpoint type.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVNet", - "AzureSubnet", - "ExternalAddress", - "MMAWorkspaceMachine", - "MMAWorkspaceNetwork", - "AzureArcVM", - "AzureVMSS", - "AzureArcNetwork" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ConnectionMonitorEndpointFilter": { - "description": "Describes the connection monitor endpoint filter.", - "properties": { - "items": { - "description": "List of items in the filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointFilterItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The behavior of the endpoint filter. Currently only 'Include' is supported.", - "oneOf": [ - { - "enum": [ - "Include" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointFilterItem": { - "description": "Describes the connection monitor endpoint filter item.", - "properties": { - "address": { - "description": "The address of the filter item.", - "type": "string" - }, - "type": { - "description": "The type of item included in the filter. Currently only 'AgentAddress' is supported.", - "oneOf": [ - { - "enum": [ - "AgentAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointLocationDetails": { - "description": "Connection monitor endpoint location details only being used for 'AzureArcNetwork' type endpoints, which contains the region details.", - "properties": { - "region": { - "description": "Region for connection monitor endpoint.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScope": { - "description": "Describes the connection monitor endpoint scope.", - "properties": { - "exclude": { - "description": "List of items which needs to be excluded from the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of items which needs to be included to the endpoint scope.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpointScopeItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorEndpointScopeItem": { - "description": "Describes the connection monitor endpoint scope item.", - "properties": { - "address": { - "description": "The address of the endpoint item. Supported types are IPv4/IPv6 subnet mask or IPv4/IPv6 IP address.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectionMonitorHttpConfiguration": { - "description": "Describes the HTTP configuration.", - "properties": { - "method": { - "description": "The HTTP method to use.", - "oneOf": [ - { - "enum": [ - "Get", - "Post" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "path": { - "description": "The path component of the URI. For instance, \"/dir1/dir2\".", - "type": "string" - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferHTTPS": { - "description": "Value indicating whether HTTPS is preferred over HTTP in cases where the choice is not explicit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestHeaders": { - "description": "The HTTP headers to transmit with the request.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HttpHeader" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "validStatusCodeRanges": { - "description": "HTTP status codes to consider successful. For instance, \"2xx,301-304,418\".", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorIcmpConfiguration": { - "description": "Describes the ICMP configuration.", - "properties": { - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorOutput": { - "description": "Describes a connection monitor output destination.", - "properties": { - "type": { - "description": "Connection monitor output destination type. Currently, only \"Workspace\" is supported.", - "oneOf": [ - { - "enum": [ - "Workspace" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorWorkspaceSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorParameters": { - "description": "Parameters that define the operation to create a connection monitor.", - "properties": { - "autoStart": { - "description": "Determines if the connection monitor will start automatically once created.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destination": { - "description": "Describes the destination of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorDestination" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "endpoints": { - "description": "List of connection monitor endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorEndpoint" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "monitoringIntervalInSeconds": { - "description": "Monitoring interval in seconds.", - "oneOf": [ - { - "maximum": 1800, - "minimum": 30, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "notes": { - "description": "Optional notes to be associated with the connection monitor.", - "type": "string" - }, - "outputs": { - "description": "List of connection monitor outputs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorOutput" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "source": { - "description": "Describes the source of connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of connection monitor test configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testGroups": { - "description": "List of connection monitor test groups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectionMonitorTestGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorSource": { - "description": "Describes the source of connection monitor.", - "properties": { - "port": { - "description": "The source port used by connection monitor.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "resourceId": { - "description": "The ID of the resource used as the source by connection monitor.", - "type": "string" - } - }, - "required": [ - "resourceId" - ], - "type": "object" - }, - "ConnectionMonitorSuccessThreshold": { - "description": "Describes the threshold for declaring a test successful.", - "properties": { - "checksFailedPercent": { - "description": "The maximum percentage of failed checks permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "roundTripTimeMs": { - "description": "The maximum round-trip time in milliseconds permitted for a test to evaluate as successful.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTcpConfiguration": { - "description": "Describes the TCP configuration.", - "properties": { - "destinationPortBehavior": { - "description": "Destination port behavior.", - "oneOf": [ - { - "enum": [ - "None", - "ListenIfAvailable" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTraceRoute": { - "description": "Value indicating whether path evaluation with trace route should be disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port to connect to.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ConnectionMonitorTestConfiguration": { - "description": "Describes a connection monitor test configuration.", - "properties": { - "httpConfiguration": { - "description": "The parameters used to perform test evaluation over HTTP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorHttpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "icmpConfiguration": { - "description": "The parameters used to perform test evaluation over ICMP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorIcmpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test configuration.", - "type": "string" - }, - "preferredIPVersion": { - "description": "The preferred IP version to use in test evaluation. The connection monitor may choose to use a different version depending on other parameters.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol to use in test evaluation.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Http", - "Icmp" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "successThreshold": { - "description": "The threshold for declaring a test successful.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorSuccessThreshold" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tcpConfiguration": { - "description": "The parameters used to perform test evaluation over TCP.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorTcpConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testFrequencySec": { - "description": "The frequency of test evaluation, in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "protocol" - ], - "type": "object" - }, - "ConnectionMonitorTestGroup": { - "description": "Describes the connection monitor test group.", - "properties": { - "destinations": { - "description": "List of destination endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disable": { - "description": "Value indicating whether test group is disabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the connection monitor test group.", - "type": "string" - }, - "sources": { - "description": "List of source endpoint names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "testConfigurations": { - "description": "List of test configuration names.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name", - "testConfigurations", - "sources", - "destinations" - ], - "type": "object" - }, - "ConnectionMonitorWorkspaceSettings": { - "description": "Describes the settings for producing output into a log analytics workspace.", - "properties": { - "workspaceResourceId": { - "description": "Log analytics workspace resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "ConnectivityConfigurationProperties": { - "description": "Properties of network manager connectivity configuration", - "properties": { - "appliesToGroups": { - "description": "Groups for configuration", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ConnectivityGroupItem" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectivityTopology": { - "description": "Connectivity topology type.", - "oneOf": [ - { - "enum": [ - "HubAndSpoke", - "Mesh" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteExistingPeering": { - "description": "Flag if need to remove current existing peerings.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the connectivity configuration.", - "type": "string" - }, - "hubs": { - "description": "List of hubItems", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Hub" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global mesh is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "connectivityTopology", - "appliesToGroups" - ], - "type": "object" - }, - "ConnectivityGroupItem": { - "description": "Connectivity group item.", - "properties": { - "groupConnectivity": { - "description": "Group connectivity type.", - "oneOf": [ - { - "enum": [ - "None", - "DirectlyConnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isGlobal": { - "description": "Flag if global is supported.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkGroupId": { - "description": "Network group Id.", - "type": "string" - }, - "useHubGateway": { - "description": "Flag if need to use hub gateway.", - "oneOf": [ - { - "enum": [ - "False", - "True" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkGroupId", - "groupConnectivity" - ], - "type": "object" - }, - "ContainerNetworkInterfaceConfiguration": { - "description": "Container network interface configuration child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Container network interface configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/ContainerNetworkInterfaceConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ContainerNetworkInterfaceConfigurationPropertiesFormat": { - "description": "Container network interface configuration properties.", - "properties": { - "containerNetworkInterfaces": { - "description": "A list of container network interfaces created from this container network interface configuration.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of ip configurations of the container network interface configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IPConfigurationProfile" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Criterion": { - "description": "A matching criteria which matches routes based on route prefix, community, and AS path.", - "properties": { - "asPath": { - "description": "List of AS paths which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCondition": { - "description": "Match condition to apply RouteMap rules.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Contains", - "Equals", - "NotContains", - "NotEquals" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes which this criteria matches.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomDnsConfigPropertiesFormat": { - "description": "Contains custom Dns resolution configuration from customer.", - "properties": { - "fqdn": { - "description": "Fqdn that resolves to private endpoint ip address.", - "type": "string" - }, - "ipAddresses": { - "description": "A list of private ip addresses of the private endpoint.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "CustomIpPrefixPropertiesFormat": { - "description": "Custom IP prefix properties.", - "properties": { - "asn": { - "description": "The ASN for CIDR advertising. Should be an integer as string.", - "type": "string" - }, - "authorizationMessage": { - "description": "Authorization message for WAN validation.", - "type": "string" - }, - "cidr": { - "description": "The prefix range in CIDR notation. Should include the start address and the prefix length.", - "type": "string" - }, - "commissionedState": { - "description": "The commissioned state of the Custom IP Prefix.", - "oneOf": [ - { - "enum": [ - "Provisioning", - "Provisioned", - "Commissioning", - "CommissionedNoInternetAdvertise", - "Commissioned", - "Decommissioning", - "Deprovisioning", - "Deprovisioned" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customIpPrefixParent": { - "description": "The Parent CustomIpPrefix for IPv6 /64 CustomIpPrefix.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteAdvertise": { - "description": "Whether to do express route advertise.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "geo": { - "description": "The Geo for CIDR advertising. Should be an Geo code.", - "oneOf": [ - { - "enum": [ - "GLOBAL", - "AFRI", - "APAC", - "EURO", - "LATAM", - "NAM", - "ME", - "OCEANIA", - "AQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "noInternetAdvertise": { - "description": "Whether to Advertise the range to Internet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "Type of custom IP prefix. Should be Singular, Parent, or Child.", - "oneOf": [ - { - "enum": [ - "Singular", - "Parent", - "Child" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signedMessage": { - "description": "Signed message for WAN validation.", - "type": "string" - } - }, - "type": "object" - }, - "DdosCustomPolicyPropertiesFormat": { - "description": "DDoS custom policy properties.", - "properties": {}, - "type": "object" - }, - "DdosProtectionPlanPropertiesFormat": { - "description": "DDoS protection plan properties.", - "properties": {}, - "type": "object" - }, - "DdosSettings": { - "description": "Contains the DDoS protection settings of the public IP.", - "properties": { - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protectionMode": { - "description": "The DDoS protection mode of the public IP", - "oneOf": [ - { - "enum": [ - "VirtualNetworkInherited", - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Delegation": { - "description": "Details the service to which the subnet is delegated.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a subnet. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceDelegationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "DelegationProperties": { - "description": "Properties of the delegation.", - "properties": { - "serviceName": { - "description": "The service name to which the NVA is delegated.", - "type": "string" - } - }, - "type": "object" - }, - "DeviceProperties": { - "description": "List of properties of the device.", - "properties": { - "deviceModel": { - "description": "Model of the device.", - "type": "string" - }, - "deviceVendor": { - "description": "Name of the device Vendor.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DhcpOptions": { - "description": "DhcpOptions contains an array of DNS servers available to VMs deployed in the virtual network. Standard DHCP option for a subnet overrides VNET DHCP options.", - "properties": { - "dnsServers": { - "description": "The list of DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DnsSettings": { - "description": "DNS Proxy Settings in Firewall Policy.", - "properties": { - "enableProxy": { - "description": "Enable DNS Proxy on Firewalls attached to the Firewall Policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requireProxyForNetworkRules": { - "description": "FQDNs in Network Rules are supported when set to true.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servers": { - "description": "List of Custom DNS Servers.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "DscpConfigurationPropertiesFormat": { - "description": "Differentiated Services Code Point configuration properties.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "qosDefinitionCollection": { - "description": "QoS object definitions", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExclusionManagedRule": { - "description": "Defines a managed rule to use for exclusion.", - "properties": { - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ExclusionManagedRuleGroup": { - "description": "Defines a managed rule group to use for exclusion.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group for exclusion.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be excluded. If none specified, all rules in the group will be excluded.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ExclusionManagedRuleSet": { - "description": "Defines a managed rule set for Exclusions.", - "properties": { - "ruleGroups": { - "description": "Defines the rule groups to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ExplicitProxy": { - "description": "Explicit Proxy Settings in Firewall Policy.", - "properties": { - "enableExplicitProxy": { - "description": "When set to true, explicit proxy mode is enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePacFile": { - "description": "When set to true, pac file port and url needs to be provided.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpPort": { - "description": "Port number for explicit proxy http protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpsPort": { - "description": "Port number for explicit proxy https protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pacFile": { - "description": "SAS URL for PAC file.", - "type": "string" - }, - "pacFilePort": { - "description": "Port number for firewall to serve PAC file.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitAuthorization": { - "description": "Authorization in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnection": { - "description": "Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitConnectionPropertiesFormat": { - "description": "Properties of the express route circuit connection.", - "properties": { - "addressPrefix": { - "description": "/29 IP address space to carve out Customer addresses for tunnels.", - "type": "string" - }, - "authorizationKey": { - "description": "The authorization key.", - "type": "string" - }, - "expressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the circuit initiating connection.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipv6CircuitConnectionConfig": { - "description": "IPv6 Address PrefixProperties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6CircuitConnectionConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerExpressRouteCircuitPeering": { - "description": "Reference to Express Route Circuit Private Peering Resource of the peered circuit.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeering": { - "description": "Peering in an ExpressRouteCircuit resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringConfig": { - "description": "Specifies the peering configuration.", - "properties": { - "advertisedCommunities": { - "description": "The communities of bgp peering. Specified for microsoft peering.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "advertisedPublicPrefixes": { - "description": "The reference to AdvertisedPublicPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customerASN": { - "description": "The CustomerASN of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "legacyMode": { - "description": "The legacy mode of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingRegistryName": { - "description": "The RoutingRegistryName of the configuration.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringId": { - "description": "ExpressRoute circuit peering identifier.", - "properties": { - "id": { - "description": "The ID of the ExpressRoute circuit peering.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitPeeringPropertiesFormat": { - "description": "Properties of the express route circuit peering.", - "properties": { - "azureASN": { - "description": "The Azure ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "The list of circuit connections associated with Azure Private Peering for this circuit.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnection": { - "description": "The ExpressRoute connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryAzurePort": { - "description": "The primary port.", - "type": "string" - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryAzurePort": { - "description": "The secondary port.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "stats": { - "description": "The peering stats of express route circuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitStats" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitPropertiesFormat": { - "description": "Properties of ExpressRouteCircuit.", - "properties": { - "allowClassicOperations": { - "description": "Allow classic operations.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "authorizations": { - "description": "The list of authorizations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitAuthorization" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bandwidthInGbps": { - "description": "The bandwidth of the circuit when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "type": "number" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "circuitProvisioningState": { - "description": "The CircuitProvisioningState state of the resource.", - "type": "string" - }, - "enableDirectPortRateLimit": { - "description": "Flag denoting rate-limiting status of the ExpressRoute direct-port circuit.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRoutePort": { - "description": "The reference to the ExpressRoutePort resource when the circuit is provisioned on an ExpressRoutePort resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "globalReachEnabled": { - "description": "Flag denoting global reach status.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCircuitPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceKey": { - "description": "The ServiceKey.", - "type": "string" - }, - "serviceProviderNotes": { - "description": "The ServiceProviderNotes.", - "type": "string" - }, - "serviceProviderProperties": { - "description": "The ServiceProviderProperties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitServiceProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderProvisioningState": { - "description": "The ServiceProviderProvisioningState state of the resource.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitReference": { - "description": "Reference to an express route circuit.", - "properties": { - "id": { - "description": "Corresponding Express Route Circuit Id.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitServiceProviderProperties": { - "description": "Contains ServiceProviderProperties in an ExpressRouteCircuit.", - "properties": { - "bandwidthInMbps": { - "description": "The BandwidthInMbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The peering location.", - "type": "string" - }, - "serviceProviderName": { - "description": "The serviceProviderName.", - "type": "string" - } - }, - "type": "object" - }, - "ExpressRouteCircuitSku": { - "description": "Contains SKU in an ExpressRouteCircuit.", - "properties": { - "family": { - "description": "The family of the SKU.", - "oneOf": [ - { - "enum": [ - "UnlimitedData", - "MeteredData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the SKU.", - "type": "string" - }, - "tier": { - "description": "The tier of the SKU.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic", - "Local" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCircuitStats": { - "description": "Contains stats associated with the peering.", - "properties": { - "primarybytesIn": { - "description": "The Primary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primarybytesOut": { - "description": "The primary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesIn": { - "description": "The secondary BytesIn of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondarybytesOut": { - "description": "The secondary BytesOut of the peering.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteConnection": { - "description": "ExpressRouteConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "name" - ], - "type": "object" - }, - "ExpressRouteConnectionId": { - "description": "The ID of the ExpressRouteConnection.", - "properties": {}, - "type": "object" - }, - "ExpressRouteConnectionProperties": { - "description": "Properties of the ExpressRouteConnection subresource.", - "properties": { - "authorizationKey": { - "description": "Authorization key to establish the connection.", - "type": "string" - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteCircuitPeering": { - "description": "The ExpressRoute circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Enable FastPath to vWan Firewall hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight associated to the connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "expressRouteCircuitPeering" - ], - "type": "object" - }, - "ExpressRouteCrossConnectionPeering": { - "description": "Peering in an ExpressRoute Cross Connection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionPeeringProperties": { - "description": "Properties of express route cross connection peering.", - "properties": { - "gatewayManagerEtag": { - "description": "The GatewayManager Etag.", - "type": "string" - }, - "ipv6PeeringConfig": { - "description": "The IPv6 peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Ipv6ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerASN": { - "description": "The peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringType": { - "description": "The peering type.", - "oneOf": [ - { - "enum": [ - "AzurePublicPeering", - "AzurePrivatePeering", - "MicrosoftPeering" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "sharedKey": { - "description": "The shared key.", - "type": "string" - }, - "state": { - "description": "The peering state.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vlanId": { - "description": "The VLAN ID.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteCrossConnectionProperties": { - "description": "Properties of ExpressRouteCrossConnection.", - "properties": { - "expressRouteCircuit": { - "description": "The ExpressRouteCircuit.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitReference" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerings": { - "description": "The list of peerings.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceProviderNotes": { - "description": "Additional read only notes set by the connectivity provider.", - "type": "string" - }, - "serviceProviderProvisioningState": { - "description": "The provisioning state of the circuit in the connectivity provider system.", - "oneOf": [ - { - "enum": [ - "NotProvisioned", - "Provisioning", - "Provisioned", - "Deprovisioning" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayProperties": { - "description": "ExpressRoute gateway resource properties.", - "properties": { - "allowNonVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from non Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteConnections": { - "description": "List of ExpressRoute connections to the ExpressRoute gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where the ExpressRoute gateway is or will be deployed.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubId" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualHub" - ], - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfiguration": { - "description": "Configuration for auto scaling.", - "properties": { - "bounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds": { - "description": "Minimum and maximum number of scale units to deploy.", - "properties": { - "max": { - "description": "Maximum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum number of scale units deployed for ExpressRoute gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLink": { - "description": "ExpressRouteLink child resource definition.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "Name of child port resource that is unique among child port resources of the parent.", - "type": "string" - }, - "properties": { - "description": "ExpressRouteLink properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkMacSecConfig": { - "description": "ExpressRouteLink Mac Security Configuration.", - "properties": { - "cakSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CAK key.", - "type": "string" - }, - "cipher": { - "description": "Mac security cipher.", - "oneOf": [ - { - "enum": [ - "GcmAes256", - "GcmAes128", - "GcmAesXpn128", - "GcmAesXpn256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cknSecretIdentifier": { - "description": "Keyvault Secret Identifier URL containing Mac security CKN key.", - "type": "string" - }, - "sciState": { - "description": "Sci mode enabled/disabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRouteLinkPropertiesFormat": { - "description": "Properties specific to ExpressRouteLink resources.", - "properties": { - "adminState": { - "description": "Administrative state of the physical port.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "macSecConfig": { - "description": "MacSec configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteLinkMacSecConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ExpressRoutePortAuthorizationPropertiesFormat": { - "description": "Properties of ExpressRoutePort Authorization.", - "properties": {}, - "type": "object" - }, - "ExpressRoutePortPropertiesFormat": { - "description": "Properties specific to ExpressRoutePort resources.", - "properties": { - "bandwidthInGbps": { - "description": "Bandwidth of procured ports in Gbps.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "billingType": { - "description": "The billing type of the ExpressRoutePort resource.", - "oneOf": [ - { - "enum": [ - "MeteredData", - "UnlimitedData" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encapsulation": { - "description": "Encapsulation method on physical ports.", - "oneOf": [ - { - "enum": [ - "Dot1Q", - "QinQ" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "links": { - "description": "The set of physical links of the ExpressRoutePort resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExpressRouteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringLocation": { - "description": "The name of the peering location that the ExpressRoutePort is mapped to physically.", - "type": "string" - } - }, - "type": "object" - }, - "ExtendedLocation": { - "description": "ExtendedLocation complex type.", - "properties": { - "name": { - "description": "The name of the extended location.", - "type": "string" - }, - "type": { - "description": "The type of the extended location.", - "oneOf": [ - { - "enum": [ - "EdgeZone" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyCertificateAuthority": { - "description": "Trusted Root certificates properties for tls.", - "properties": { - "keyVaultSecretId": { - "description": "Secret Id of (base-64 encoded unencrypted pfx) 'Secret' or 'Certificate' object stored in KeyVault.", - "type": "string" - }, - "name": { - "description": "Name of the CA certificate.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyDraftProperties": { - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyFilterRuleCollectionAction": { - "description": "Properties of the FirewallPolicyFilterRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyHttpHeaderToInsert": { - "description": "name and value of HTTP/S header to insert", - "properties": { - "headerName": { - "description": "Contains the name of the header", - "type": "string" - }, - "headerValue": { - "description": "Contains the value of the header", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyInsights": { - "description": "Firewall Policy Insights.", - "properties": { - "isEnabled": { - "description": "A flag to indicate if the insights are enabled on the policy.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logAnalyticsResources": { - "description": "Workspaces needed to configure the Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsResources" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionDays": { - "description": "Number of days the insights should be enabled on the policy.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetection": { - "description": "Configuration for intrusion detection mode and rules.", - "properties": { - "configuration": { - "description": "Intrusion detection configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "Intrusion detection general state. When attached to a parent policy, the firewall's effective IDPS mode is the stricter mode of the two.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "profile": { - "description": "IDPS profile name. When attached to a parent policy, the firewall's effective profile is the profile name of the parent policy.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Advanced", - "Extended" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionBypassTrafficSpecifications": { - "description": "Intrusion detection bypass traffic specification.", - "properties": { - "description": { - "description": "Description of the bypass traffic rule.", - "type": "string" - }, - "destinationAddresses": { - "description": "List of destination IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports or ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the bypass traffic rule.", - "type": "string" - }, - "protocol": { - "description": "The rule bypass protocol.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "ICMP", - "ANY" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses or ranges for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionConfiguration": { - "description": "The operation for configuring intrusion detection.", - "properties": { - "bypassTrafficSettings": { - "description": "List of rules for traffic to bypass.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionBypassTrafficSpecifications" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "IDPS Private IP address ranges are used to identify traffic direction (i.e. inbound, outbound, etc.). By default, only ranges defined by IANA RFC 1918 are considered private IP addresses. To modify default ranges, specify your Private IP address ranges with this property", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "signatureOverrides": { - "description": "List of specific signatures states.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyIntrusionDetectionSignatureSpecification" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyIntrusionDetectionSignatureSpecification": { - "description": "Intrusion detection signatures specification states.", - "properties": { - "id": { - "description": "Signature id.", - "type": "string" - }, - "mode": { - "description": "The signature state.", - "oneOf": [ - { - "enum": [ - "Off", - "Alert", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsResources": { - "description": "Log Analytics Resources for Firewall Policy Insights.", - "properties": { - "defaultWorkspaceId": { - "description": "The default workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaces": { - "description": "List of workspaces for Firewall Policy Insights.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyLogAnalyticsWorkspace" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyLogAnalyticsWorkspace": { - "description": "Log Analytics Workspace for Firewall Policy Insights.", - "properties": { - "region": { - "description": "Region to configure the Workspace.", - "type": "string" - }, - "workspaceId": { - "description": "The workspace Id for Firewall Policy Insights.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyNatRuleCollectionAction": { - "description": "Properties of the FirewallPolicyNatRuleCollectionAction.", - "properties": { - "type": { - "description": "The type of action.", - "oneOf": [ - { - "enum": [ - "DNAT" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyPropertiesFormat": { - "description": "Firewall Policy definition.", - "properties": { - "basePolicy": { - "description": "The parent firewall policy from which rules are inherited.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "DNS Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/DnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "explicitProxy": { - "description": "Explicit Proxy Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/ExplicitProxy" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "insights": { - "description": "Insights on Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyInsights" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "intrusionDetection": { - "description": "The configuration for Intrusion detection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyIntrusionDetection" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The Firewall Policy SKU.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "snat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySnat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sql": { - "description": "SQL Settings definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicySQL" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelMode": { - "description": "The operation mode for Threat Intelligence.", - "oneOf": [ - { - "enum": [ - "Alert", - "Deny", - "Off" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "threatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyThreatIntelWhitelist" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transportSecurity": { - "description": "TLS Configuration definition.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyTransportSecurity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRule": { - "description": "Properties of a rule.", - "oneOf": [ - { - "description": "Rule of type application.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdnTags": { - "description": "List of FQDN Tags for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "httpHeadersToInsert": { - "description": "List of HTTP/S headers to insert.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyHttpHeaderToInsert" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocols": { - "description": "Array of Application Protocols.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleApplicationProtocol" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetFqdns": { - "description": "List of FQDNs for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "targetUrls": { - "description": "List of Urls for this rule condition.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "terminateTLS": { - "description": "Terminate TLS connections for this rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "webCategories": { - "description": "List of destination azure web categories.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Rule of type nat.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "translatedAddress": { - "description": "The translated address for this NAT rule.", - "type": "string" - }, - "translatedFqdn": { - "description": "The translated FQDN for this NAT rule.", - "type": "string" - }, - "translatedPort": { - "description": "The translated port for this NAT rule.", - "type": "string" - } - }, - "type": "object" - }, - { - "description": "Rule of type network.", - "properties": { - "destinationAddresses": { - "description": "List of destination IP addresses or Service Tags.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationFqdns": { - "description": "List of destination FQDNs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationIpGroups": { - "description": "List of destination IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPorts": { - "description": "List of destination ports.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipProtocols": { - "description": "Array of FirewallPolicyRuleNetworkProtocols.", - "oneOf": [ - { - "items": { - "enum": [ - "TCP", - "UDP", - "Any", - "ICMP" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddresses": { - "description": "List of source IP addresses for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpGroups": { - "description": "List of source IpGroups for this rule.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "description": { - "description": "Description of the rule.", - "type": "string" - }, - "name": { - "description": "Name of the rule.", - "type": "string" - } - }, - "type": "object" - }, - "FirewallPolicyRuleApplicationProtocol": { - "description": "Properties of the application rule protocol.", - "properties": { - "port": { - "description": "Port number for the protocol, cannot be greater than 64000.", - "oneOf": [ - { - "maximum": 64000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocolType": { - "description": "Protocol type.", - "oneOf": [ - { - "enum": [ - "Http", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollection": { - "description": "Properties of the rule collection.", - "oneOf": [ - { - "description": "Firewall Policy Filter Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Filter rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyFilterRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - { - "description": "Firewall Policy NAT Rule Collection.", - "properties": { - "action": { - "description": "The action type of a Nat rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyNatRuleCollectionAction" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of rules included in a rule collection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - } - ], - "properties": { - "name": { - "description": "The name of the rule collection.", - "type": "string" - }, - "priority": { - "description": "Priority of the Firewall Policy Rule Collection resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupDraftProperties": { - "description": "Properties of the rule collection group draft.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyRuleCollectionGroupProperties": { - "description": "Properties of the rule collection group.", - "properties": { - "priority": { - "description": "Priority of the Firewall Policy Rule Collection Group resource.", - "oneOf": [ - { - "maximum": 65000, - "minimum": 100, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleCollections": { - "description": "Group of Firewall Policy rule collections.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FirewallPolicyRuleCollection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySQL": { - "description": "SQL Settings in Firewall Policy.", - "properties": { - "allowSqlRedirect": { - "description": "A flag to indicate if SQL Redirect traffic filtering is enabled. Turning on the flag requires no rule using port 11000-11999.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySku": { - "description": "SKU of Firewall policy.", - "properties": { - "tier": { - "description": "Tier of Firewall Policy.", - "oneOf": [ - { - "enum": [ - "Standard", - "Premium", - "Basic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicySnat": { - "description": "The private IP addresses/IP ranges to which traffic will not be SNAT.", - "properties": { - "autoLearnPrivateRanges": { - "description": "The operation mode for automatically learning private ranges to not be SNAT", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateRanges": { - "description": "List of private IP addresses/IP address ranges to not be SNAT.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyThreatIntelWhitelist": { - "description": "ThreatIntel Whitelist for Firewall Policy.", - "properties": { - "fqdns": { - "description": "List of FQDNs for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddresses": { - "description": "List of IP addresses for the ThreatIntel Whitelist.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FirewallPolicyTransportSecurity": { - "description": "Configuration needed to perform TLS termination & initiation.", - "properties": { - "certificateAuthority": { - "description": "The CA used for intermediate CA generation.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyCertificateAuthority" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogFormatParameters": { - "description": "Parameters that define the flow log format.", - "properties": { - "type": { - "description": "The file type of flow log.", - "oneOf": [ - { - "enum": [ - "JSON" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "version": { - "description": "The version (revision) of the flow log.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FlowLogPropertiesFormat": { - "description": "Parameters that define the configuration of flow log.", - "properties": { - "enabled": { - "description": "Flag to enable/disable flow logging.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "format": { - "description": "Parameters that define the flow log format.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogFormatParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "retentionPolicy": { - "description": "Parameters that define the retention policy for flow log.", - "oneOf": [ - { - "$ref": "#/definitions/RetentionPolicyParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageId": { - "description": "ID of the storage account which is used to store the flow log.", - "type": "string" - }, - "targetResourceId": { - "description": "ID of network security group to which flow log will be applied.", - "type": "string" - } - }, - "required": [ - "targetResourceId", - "storageId" - ], - "type": "object" - }, - "FrontendIPConfiguration": { - "description": "Frontend IP address of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "FrontendIPConfigurationPropertiesFormat": { - "description": "Properties of Frontend IP Configuration of the load balancer.", - "properties": { - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The Private IP allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the Public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The reference to the Public IP Prefix resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GatewayCustomBgpIpAddressIpConfiguration": { - "description": "GatewayCustomBgpIpAddressIpConfiguration for a virtual network gateway connection.", - "properties": { - "customBgpIpAddress": { - "description": "The custom BgpPeeringAddress which belongs to IpconfigurationId.", - "type": "string" - }, - "ipConfigurationId": { - "description": "The IpconfigurationId of ipconfiguration which belongs to gateway.", - "type": "string" - } - }, - "required": [ - "ipConfigurationId", - "customBgpIpAddress" - ], - "type": "object" - }, - "GatewayLoadBalancerTunnelInterface": { - "description": "Gateway load balancer tunnel interface of a load balancer backend address pool.", - "properties": { - "identifier": { - "description": "Identifier of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "Port of gateway load balancer tunnel interface.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Protocol of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Native", - "VXLAN" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Traffic type of gateway load balancer tunnel interface.", - "oneOf": [ - { - "enum": [ - "None", - "Internal", - "External" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "GroupByUserSession": { - "description": "Define user session identifier group by clauses.", - "properties": { - "groupByVariables": { - "description": "List of group by clause variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "groupByVariables" - ], - "type": "object" - }, - "GroupByVariable": { - "description": "Define user session group by clause variables.", - "properties": { - "variableName": { - "description": "User Session clause variable.", - "oneOf": [ - { - "enum": [ - "ClientAddr", - "GeoLocation", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "HeaderValueMatcher": { - "description": "An optional field under \"Rewrite Action\". It lets you capture and modify the value(s) of a specific header when multiple headers with the same name exist. Currently supported for Set-Cookie Response header only. For more details, visit https://aka.ms/appgwheadercrud", - "properties": { - "ignoreCase": { - "description": "Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negate": { - "description": "Setting this value as truth will force to check the negation of the condition given by the user in the pattern field.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pattern": { - "description": "The pattern, either fixed string or regular expression, that evaluates if a header value should be selected for rewrite.", - "type": "string" - } - }, - "type": "object" - }, - "HttpHeader": { - "description": "The HTTP header.", - "properties": { - "name": { - "description": "The name in HTTP header.", - "type": "string" - }, - "value": { - "description": "The value in HTTP header.", - "type": "string" - } - }, - "type": "object" - }, - "Hub": { - "description": "Hub Item.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - }, - "resourceType": { - "description": "Resource Type.", - "type": "string" - } - }, - "type": "object" - }, - "HubIPAddresses": { - "description": "IP addresses associated with azure firewall.", - "properties": { - "privateIPAddress": { - "description": "Private IP Address associated with azure firewall.", - "type": "string" - }, - "publicIPs": { - "description": "Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "$ref": "#/definitions/HubPublicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubPublicIPAddresses": { - "description": "Public IP addresses associated with azure firewall.", - "properties": { - "addresses": { - "description": "The list of Public IP addresses associated with azure firewall or IP addresses to be retained.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/AzureFirewallPublicIPAddress" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "count": { - "description": "The number of Public IP addresses associated with azure firewall.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubRoute": { - "description": "RouteTable route.", - "properties": { - "destinationType": { - "description": "The type of destinations (eg: CIDR, ResourceId, Service).", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the Route that is unique within a RouteTable. This name can be used to access this route.", - "type": "string" - }, - "nextHop": { - "description": "NextHop resource ID.", - "type": "string" - }, - "nextHopType": { - "description": "The type of next hop (eg: ResourceId).", - "type": "string" - } - }, - "required": [ - "name", - "destinationType", - "destinations", - "nextHopType", - "nextHop" - ], - "type": "object" - }, - "HubRouteTableProperties": { - "description": "Parameters for RouteTable.", - "properties": { - "labels": { - "description": "List of labels associated with this route table.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/HubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "HubVirtualNetworkConnectionProperties": { - "description": "Parameters for HubVirtualNetworkConnection.", - "properties": { - "allowHubToRemoteVnetTransit": { - "description": "Deprecated: VirtualHub to RemoteVnet transit to enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetToUseHubVnetGateways": { - "description": "Deprecated: Allow RemoteVnet to use Virtual Hub's gateways.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "Reference to the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationBgpPeeringAddress": { - "description": "Properties of IPConfigurationBgpPeeringAddress.", - "properties": { - "customBgpIpAddresses": { - "description": "The list of custom BGP peering addresses which belong to IP configuration.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipconfigurationId": { - "description": "The ID of IP configuration which belongs to gateway.", - "type": "string" - } - }, - "type": "object" - }, - "IPConfigurationProfile": { - "description": "IP configuration profile child resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the IP configuration profile.", - "oneOf": [ - { - "$ref": "#/definitions/IPConfigurationProfilePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPConfigurationProfilePropertiesFormat": { - "description": "IP configuration profile properties.", - "properties": { - "subnet": { - "description": "The reference to the subnet resource to create a container network interface ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IPRule": { - "properties": { - "addressPrefix": { - "description": "Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.", - "type": "string" - } - }, - "type": "object" - }, - "InboundNatPool": { - "description": "Inbound NAT pool of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound nat pool.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatPoolPropertiesFormat": { - "description": "Properties of Inbound NAT pool.", - "properties": { - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the inbound NAT pool.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPortRangeStart", - "frontendPortRangeEnd", - "backendPort" - ], - "type": "object" - }, - "InboundNatRule": { - "description": "Inbound NAT rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundNatRulePropertiesFormat": { - "description": "Properties of the inbound NAT rule.", - "properties": { - "backendAddressPool": { - "description": "A reference to backendAddressPool resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for the internal endpoint. Acceptable values range from 1 to 65535.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeEnd": { - "description": "The port range end for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeStart. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPortRangeStart": { - "description": "The port range start for the external endpoint. This property is used together with BackendAddressPool and FrontendPortRangeEnd. Individual inbound NAT rule port mappings will be created for each backend address from BackendAddressPool. Acceptable values range from 1 to 65534.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRuleProperties": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "ruleType": { - "description": "Rule Type. This should be either AutoExpire or Permanent. Auto Expire Rule only creates NSG rules. Permanent Rule creates NSG rule and SLB LB Rule.", - "oneOf": [ - { - "enum": [ - "AutoExpire", - "Permanent" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of allowed rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundSecurityRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "InboundSecurityRules": { - "description": "Properties of the Inbound Security Rules resource.", - "properties": { - "appliesOn": { - "description": "Public IP name in case of Permanent Rule type & Interface Name in case of Auto Expire Rule type", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "NVA port ranges to be opened up. One needs to provide specific ports.", - "oneOf": [ - { - "maximum": 65535, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "NVA port ranges to be opened up. One can provide a range of ports. Allowed port value between 0 and 65535.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of the rule.", - "type": "string" - }, - "protocol": { - "description": "Protocol. This should be either TCP or UDP.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range.", - "type": "string" - } - }, - "type": "object" - }, - "InternetIngressPublicIpsProperties": { - "description": "Resource Uri of Public Ip for Standard Load Balancer Frontend End.", - "properties": { - "id": { - "description": "Resource Uri of Public Ip", - "type": "string" - } - }, - "type": "object" - }, - "IpAllocationPropertiesFormat": { - "description": "Properties of the IpAllocation.", - "properties": { - "allocationTags": { - "description": "IpAllocation tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipamAllocationId": { - "description": "The IPAM allocation ID.", - "type": "string" - }, - "prefix": { - "description": "The address prefix for the IpAllocation.", - "type": "string" - }, - "prefixLength": { - "description": "The address prefix length for the IpAllocation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixType": { - "description": "The address prefix Type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type for the IpAllocation.", - "oneOf": [ - { - "enum": [ - "Undefined", - "Hypernet" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpGroupPropertiesFormat": { - "description": "The IpGroups property information.", - "properties": { - "ipAddresses": { - "description": "IpAddresses/IpAddressPrefixes in the IpGroups resource.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "IpTag": { - "description": "Contains the IpTag associated with the object.", - "properties": { - "ipTagType": { - "description": "The IP tag type. Example: FirstPartyUsage.", - "type": "string" - }, - "tag": { - "description": "The value of the IP tag associated with the public IP. Example: SQL.", - "type": "string" - } - }, - "type": "object" - }, - "IpsecPolicy": { - "description": "An IPSec Policy configuration for a virtual network gateway connection.", - "properties": { - "dhGroup": { - "description": "The DH Group used in IKE Phase 1 for initial SA.", - "oneOf": [ - { - "enum": [ - "None", - "DHGroup1", - "DHGroup2", - "DHGroup14", - "DHGroup2048", - "ECP256", - "ECP384", - "DHGroup24" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeEncryption": { - "description": "The IKE encryption algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ikeIntegrity": { - "description": "The IKE integrity algorithm (IKE phase 2).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "SHA384", - "GCMAES256", - "GCMAES128" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecEncryption": { - "description": "The IPSec encryption algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "None", - "DES", - "DES3", - "AES128", - "AES192", - "AES256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecIntegrity": { - "description": "The IPSec integrity algorithm (IKE phase 1).", - "oneOf": [ - { - "enum": [ - "MD5", - "SHA1", - "SHA256", - "GCMAES128", - "GCMAES192", - "GCMAES256" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "pfsGroup": { - "description": "The Pfs Group used in IKE Phase 2 for new child SA.", - "oneOf": [ - { - "enum": [ - "None", - "PFS1", - "PFS2", - "PFS2048", - "ECP256", - "ECP384", - "PFS24", - "PFS14", - "PFSMM" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saDataSizeKilobytes": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "saLifeTimeSeconds": { - "description": "The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "saLifeTimeSeconds", - "saDataSizeKilobytes", - "ipsecEncryption", - "ipsecIntegrity", - "ikeEncryption", - "ikeIntegrity", - "dhGroup", - "pfsGroup" - ], - "type": "object" - }, - "Ipv6CircuitConnectionConfig": { - "description": "IPv6 Circuit Connection properties for global reach.", - "properties": { - "addressPrefix": { - "description": "/125 IP address space to carve out customer addresses for global reach.", - "type": "string" - } - }, - "type": "object" - }, - "Ipv6ExpressRouteCircuitPeeringConfig": { - "description": "Contains IPv6 peering config.", - "properties": { - "microsoftPeeringConfig": { - "description": "The Microsoft peering configuration.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primaryPeerAddressPrefix": { - "description": "The primary address prefix.", - "type": "string" - }, - "routeFilter": { - "description": "The reference to the RouteFilter resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "secondaryPeerAddressPrefix": { - "description": "The secondary address prefix.", - "type": "string" - }, - "state": { - "description": "The state of peering.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddress": { - "description": "Load balancer backend addresses.", - "properties": { - "name": { - "description": "Name of the backend address.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancerBackendAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerBackendAddressPropertiesFormat": { - "description": "Properties of the load balancer backend addresses.", - "properties": { - "adminState": { - "description": "A list of administrative states which once set can override health probe so that Load Balancer will always forward new connections to backend, or deny new connections and reset existing connections.", - "oneOf": [ - { - "enum": [ - "None", - "Up", - "Down" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "IP Address belonging to the referenced virtual network.", - "type": "string" - }, - "loadBalancerFrontendIPConfiguration": { - "description": "Reference to the frontend ip address configuration defined in regional loadbalancer.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Reference to an existing subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetwork": { - "description": "Reference to an existing virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerPropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPools": { - "description": "Collection of backend address pools used by a load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "Object representing the frontend IPs to be used for the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatPools": { - "description": "Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundNatRules": { - "description": "Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancingRules": { - "description": "Object collection representing the load balancing rules Gets the provisioning.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/LoadBalancingRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRules": { - "description": "The outbound rules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OutboundRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probes": { - "description": "Collection of probe objects used in the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Probe" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancerSku": { - "description": "SKU of a load balancer.", - "properties": { - "name": { - "description": "Name of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Gateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a load balancer SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRule": { - "description": "A load balancing rule for a load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/LoadBalancingRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "LoadBalancingRulePropertiesFormat": { - "description": "Properties of the load balancer.", - "properties": { - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPools": { - "description": "An array of references to pool of DIPs.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendPort": { - "description": "The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableOutboundSnat": { - "description": "Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableFloatingIP": { - "description": "Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfiguration": { - "description": "A reference to frontend IP addresses.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendPort": { - "description": "The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables \"Any Port\".", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadDistribution": { - "description": "The load distribution policy for this rule.", - "oneOf": [ - { - "enum": [ - "Default", - "SourceIP", - "SourceIPProtocol" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probe": { - "description": "The reference to the load balancer probe used by the load balancing rule.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The reference to the transport protocol used by the load balancing rule.", - "oneOf": [ - { - "enum": [ - "Udp", - "Tcp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "frontendPort" - ], - "type": "object" - }, - "LocalNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the local network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "LocalNetworkGatewayPropertiesFormat": { - "description": "LocalNetworkGateway properties.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of local network gateway.", - "type": "string" - }, - "gatewayIpAddress": { - "description": "IP address of local network gateway.", - "type": "string" - }, - "localNetworkAddressSpace": { - "description": "Local network site address space.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ManagedRuleGroupOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "ruleGroupName": { - "description": "The managed rule group to override.", - "type": "string" - }, - "rules": { - "description": "List of rules that will be disabled. If none specified, all rules in the group will be disabled.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleGroupName" - ], - "type": "object" - }, - "ManagedRuleOverride": { - "description": "Defines a managed rule group override setting.", - "properties": { - "action": { - "description": "Describes the override action to be applied when rule matches.", - "oneOf": [ - { - "enum": [ - "AnomalyScoring", - "Allow", - "Block", - "Log", - "JSChallenge" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleId": { - "description": "Identifier for the managed rule.", - "type": "string" - }, - "state": { - "description": "The state of the managed rule. Defaults to Disabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "ruleId" - ], - "type": "object" - }, - "ManagedRuleSet": { - "description": "Defines a managed rule set.", - "properties": { - "ruleGroupOverrides": { - "description": "Defines the rule group overrides to apply to the rule set.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleGroupOverride" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleSetType": { - "description": "Defines the rule set type to use.", - "type": "string" - }, - "ruleSetVersion": { - "description": "Defines the version of the rule set to use.", - "type": "string" - } - }, - "required": [ - "ruleSetType", - "ruleSetVersion" - ], - "type": "object" - }, - "ManagedRulesDefinition": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusions": { - "description": "The Exclusions that are applied on the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/OwaspCrsExclusionEntry" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRuleSets": { - "description": "The managed rule sets that are associated with the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRuleSets" - ], - "type": "object" - }, - "ManagedServiceIdentity": { - "description": "Identity for the resource.", - "properties": { - "type": { - "description": "The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user assigned identities. The type 'None' will remove any identities from the virtual machine.", - "oneOf": [ - { - "enum": [ - "SystemAssigned", - "UserAssigned", - "SystemAssigned, UserAssigned", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "userAssignedIdentities": { - "description": "The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.", - "oneOf": [ - { - "additionalProperties": { - "$ref": "#/definitions/Components1Jq1T4ISchemasManagedserviceidentityPropertiesUserassignedidentitiesAdditionalproperties" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "MatchCondition": { - "description": "Define match conditions.", - "properties": { - "matchValues": { - "description": "Match value.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariables": { - "description": "List of match variables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchVariable" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "negationConditon": { - "description": "Whether this is negate condition or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "operator": { - "description": "The operator to be matched.", - "oneOf": [ - { - "enum": [ - "IPMatch", - "Equal", - "Contains", - "LessThan", - "GreaterThan", - "LessThanOrEqual", - "GreaterThanOrEqual", - "BeginsWith", - "EndsWith", - "Regex", - "GeoMatch", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "transforms": { - "description": "List of transforms.", - "oneOf": [ - { - "items": { - "enum": [ - "Uppercase", - "Lowercase", - "Trim", - "UrlDecode", - "UrlEncode", - "RemoveNulls", - "HtmlEntityDecode" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariables", - "operator", - "matchValues" - ], - "type": "object" - }, - "MatchVariable": { - "description": "Define match variables.", - "properties": { - "selector": { - "description": "The selector of match variable.", - "type": "string" - }, - "variableName": { - "description": "Match Variable.", - "oneOf": [ - { - "enum": [ - "RemoteAddr", - "RequestMethod", - "QueryString", - "PostArgs", - "RequestUri", - "RequestHeaders", - "RequestBody", - "RequestCookies" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "variableName" - ], - "type": "object" - }, - "NatGateway": { - "description": "Nat Gateway resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Nat Gateway properties.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The nat gateway SKU.", - "oneOf": [ - { - "$ref": "#/definitions/NatGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the zone in which Nat Gateway should be deployed.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewayPropertiesFormat": { - "description": "Nat Gateway properties.", - "properties": { - "idleTimeoutInMinutes": { - "description": "The idle timeout of the nat gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpAddresses": { - "description": "An array of public ip addresses associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIpPrefixes": { - "description": "An array of public ip prefixes associated with the nat gateway resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NatGatewaySku": { - "description": "SKU of nat gateway.", - "properties": { - "name": { - "description": "Name of Nat Gateway SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkGroupProperties": { - "description": "Properties of network group", - "properties": { - "description": { - "description": "A description of the network group.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceDnsSettings": { - "description": "DNS settings of a network interface.", - "properties": { - "dnsServers": { - "description": "List of DNS servers IP addresses. Use 'AzureProvidedDNS' to switch to azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dnsServers collection.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalDnsNameLabel": { - "description": "Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfiguration": { - "description": "IPConfiguration in a network interface.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Network interface IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceIPConfigurationPropertiesFormat": { - "description": "Properties of IP configuration.", - "properties": { - "applicationGatewayBackendAddressPools": { - "description": "The reference to ApplicationGatewayBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationSecurityGroups": { - "description": "Application security groups in which the IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayLoadBalancer": { - "description": "The reference to gateway load balancer frontend IP.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerBackendAddressPools": { - "description": "The reference to LoadBalancerBackendAddressPool resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/BackendAddressPool" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerInboundNatRules": { - "description": "A list of references of LoadBalancerInboundNatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InboundNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "primary": { - "description": "Whether this is a primary customer address on the network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "Private IP address of the IP configuration. It can be a single IP address or a CIDR block in the format
/.", - "type": "string" - }, - "privateIPAddressPrefixLength": { - "description": "The private IP address prefix length. If specified and the allocation method is dynamic, the service will allocate a CIDR block instead of a single IP address.", - "oneOf": [ - { - "maximum": 128, - "minimum": 1, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "Public IP address bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddress" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "Subnet bound to the IP configuration.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkTaps": { - "description": "The reference to Virtual Network Taps.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkInterfacePropertiesFormat": { - "description": "NetworkInterface properties.", - "properties": { - "auxiliaryMode": { - "description": "Auxiliary mode of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "MaxConnections", - "Floating", - "AcceleratedConnections" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "auxiliarySku": { - "description": "Auxiliary sku of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "A1", - "A2", - "A4", - "A8" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableTcpStateTracking": { - "description": "Indicates whether to disable tcp state tracking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The DNS settings in network interface.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableAcceleratedNetworking": { - "description": "If the network interface is configured for accelerated networking. Not applicable to VM sizes which require accelerated networking.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableIPForwarding": { - "description": "Indicates whether IP forwarding is enabled on this network interface.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "A list of IPConfigurations of the network interface.", - "oneOf": [ - { - "items": { - "type": "object" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nicType": { - "description": "Type of Network Interface resource.", - "oneOf": [ - { - "enum": [ - "Standard", - "Elastic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkService": { - "description": "Privatelinkservice of the network interface resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkService" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workloadType": { - "description": "WorkloadType of the NetworkInterface for BareMetal resources", - "type": "string" - } - }, - "type": "object" - }, - "NetworkInterfaceTapConfigurationPropertiesFormat": { - "description": "Properties of Virtual Network Tap configuration.", - "properties": { - "virtualNetworkTap": { - "description": "The reference to the Virtual Network Tap resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTap" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerConnectionProperties": { - "description": "Information about the network manager connection.", - "properties": { - "description": { - "description": "A description of the network manager connection.", - "type": "string" - }, - "networkManagerId": { - "description": "Network Manager Id.", - "type": "string" - } - }, - "type": "object" - }, - "NetworkManagerProperties": { - "description": "Properties of Managed Network", - "properties": { - "description": { - "description": "A description of the network manager.", - "type": "string" - }, - "networkManagerScopeAccesses": { - "description": "Scope Access.", - "oneOf": [ - { - "items": { - "enum": [ - "SecurityAdmin", - "Connectivity" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkManagerScopes": { - "description": "Scope of Network Manager.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkManagerPropertiesNetworkManagerScopes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "networkManagerScopes", - "networkManagerScopeAccesses" - ], - "type": "object" - }, - "NetworkManagerPropertiesNetworkManagerScopes": { - "description": "Scope of Network Manager.", - "properties": { - "managementGroups": { - "description": "List of management groups.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subscriptions": { - "description": "List of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkManagerSecurityGroupItem": { - "description": "Network manager security group item.", - "properties": { - "networkGroupId": { - "description": "Network manager group Id.", - "type": "string" - } - }, - "required": [ - "networkGroupId" - ], - "type": "object" - }, - "NetworkProfilePropertiesFormat": { - "description": "Network profile properties.", - "properties": { - "containerNetworkInterfaceConfigurations": { - "description": "List of chid container network interface configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ContainerNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroup": { - "description": "NetworkSecurityGroup resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the network security group.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkSecurityGroupPropertiesFormat": { - "description": "Network Security Group resource.", - "properties": { - "flushConnection": { - "description": "When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityRules": { - "description": "A collection of security rules of the network security group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SecurityRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualApplianceConnectionProperties": { - "description": "Properties of the NetworkVirtualApplianceConnection subresource.", - "properties": { - "asn": { - "description": "Network Virtual Appliance ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeerAddress": { - "description": "List of bgpPeerAddresses for the NVA instances", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource.", - "type": "string" - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tunnelIdentifier": { - "description": "Unique identifier for the connection.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormat": { - "description": "Network Virtual Appliance definition.", - "properties": { - "additionalNics": { - "description": "Details required for Additional Network Interface.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualApplianceAdditionalNicProperties" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bootStrapConfigurationBlobs": { - "description": "BootStrapConfigurationBlobs storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "cloudInitConfiguration": { - "description": "CloudInitConfiguration string in plain text.", - "type": "string" - }, - "cloudInitConfigurationBlobs": { - "description": "CloudInitConfigurationBlob storage URLs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegation": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/DelegationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internetIngressPublicIps": { - "description": "List of Resource Uri of Public IPs for Internet Ingress Scenario.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/InternetIngressPublicIpsProperties" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkProfile": { - "description": "Network Profile containing configurations for Public and Private NIC.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualAppliancePropertiesFormatNetworkProfile" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nvaSku": { - "description": "Network Virtual Appliance SKU.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSkuProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "partnerManagedResource": { - "description": "The delegation for the Virtual Appliance", - "oneOf": [ - { - "$ref": "#/definitions/PartnerManagedResourceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sshPublicKey": { - "description": "Public key for SSH login.", - "type": "string" - }, - "virtualApplianceAsn": { - "description": "VirtualAppliance ASN. Microsoft private, public and IANA reserved ASN are not supported.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The Virtual Hub where Network Virtual Appliance is being deployed.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkVirtualAppliancePropertiesFormatNetworkProfile": { - "description": "Network Profile containing configurations for Public and Private NIC.", - "properties": { - "networkInterfaceConfigurations": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualApplianceNetworkInterfaceConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "NetworkWatcherPropertiesFormat": { - "description": "The network watcher properties.", - "properties": {}, - "type": "object" - }, - "O365BreakOutCategoryPolicies": { - "description": "Office365 breakout categories.", - "properties": { - "allow": { - "description": "Flag to control allow category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "default": { - "description": "Flag to control default category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "optimize": { - "description": "Flag to control optimize category.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "O365PolicyProperties": { - "description": "The Office365 breakout policy.", - "properties": { - "breakOutCategories": { - "description": "Office365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/O365BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Office365PolicyProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "breakOutCategories": { - "description": "Office 365 breakout categories.", - "oneOf": [ - { - "$ref": "#/definitions/BreakOutCategoryPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRule": { - "description": "Outbound rule of the load balancer.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer outbound rule.", - "oneOf": [ - { - "$ref": "#/definitions/OutboundRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "OutboundRulePropertiesFormat": { - "description": "Outbound rule of the load balancer.", - "properties": { - "allocatedOutboundPorts": { - "description": "The number of outbound ports to be used for NAT.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "backendAddressPool": { - "description": "A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableTcpReset": { - "description": "Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "frontendIPConfigurations": { - "description": "The Frontend IP addresses of the load balancer.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The timeout for the TCP idle connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol for the outbound rule in load balancer.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "frontendIPConfigurations", - "backendAddressPool", - "protocol" - ], - "type": "object" - }, - "OwaspCrsExclusionEntry": { - "description": "Allow to exclude some variable satisfy the condition for the WAF check.", - "properties": { - "exclusionManagedRuleSets": { - "description": "The managed rule sets that are associated with the exclusion.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ExclusionManagedRuleSet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchVariable": { - "description": "The variable to be excluded.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestHeaderKeys", - "RequestHeaderValues", - "RequestCookieKeys", - "RequestCookieValues", - "RequestArgKeys", - "RequestArgValues" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "Contains", - "StartsWith", - "EndsWith", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator", - "selector" - ], - "type": "object" - }, - "P2SConnectionConfiguration": { - "description": "P2SConnectionConfiguration Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the P2S connection configuration.", - "oneOf": [ - { - "$ref": "#/definitions/P2SConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SConnectionConfigurationProperties": { - "description": "Parameters for P2SConnectionConfiguration.", - "properties": { - "enableInternetSecurity": { - "description": "Flag indicating whether the enable internet security flag is turned on for the P2S Connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "P2SVpnGatewayProperties": { - "description": "Parameters for P2SVpnGateway.", - "properties": { - "customDnsServers": { - "description": "List of all customer specified DNS servers IP addresses.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the P2SVpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SConnectionConfigurations": { - "description": "List of all p2s connection configurations of the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/P2SConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this p2s vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnServerConfiguration": { - "description": "The VpnServerConfiguration to which the p2sVpnGateway is attached to.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureFilter": { - "description": "Filter that is applied to packet capture request. Multiple filters can be applied.", - "properties": { - "localIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5\"? for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "localPort": { - "description": "Local port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "protocol": { - "description": "Protocol to be filtered on.", - "oneOf": [ - { - "enum": [ - "TCP", - "UDP", - "Any" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteIPAddress": { - "description": "Local IP Address to be filtered on. Notation: \"127.0.0.1\" for single address entry. \"127.0.0.1-127.0.0.255\" for range. \"127.0.0.1;127.0.0.5;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - }, - "remotePort": { - "description": "Remote port to be filtered on. Notation: \"80\" for single port entry.\"80-85\" for range. \"80;443;\" for multiple entries. Multiple ranges not currently supported. Mixing ranges with multiple entries not currently supported. Default = null.", - "type": "string" - } - }, - "type": "object" - }, - "PacketCaptureMachineScope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "properties": { - "exclude": { - "description": "List of AzureVMSS instances which has to be excluded from the AzureVMSS from running packet capture.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "include": { - "description": "List of AzureVMSS instances to run packet capture on.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureParameters": { - "description": "Parameters that define the create packet capture operation.", - "properties": { - "bytesToCapturePerPacket": { - "description": "Number of bytes captured per packet, the remaining bytes are truncated.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "captureSettings": { - "description": "The capture setting holds the 'FileCount', 'FileSizeInBytes', 'SessionTimeLimitInSeconds' values.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "continuousCapture": { - "description": "This continuous capture is a nullable boolean, which can hold 'null', 'true' or 'false' value. If we do not pass this parameter, it would be consider as 'null', default value is 'null'.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "filters": { - "description": "A list of packet capture filters.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PacketCaptureFilter" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "scope": { - "description": "A list of AzureVMSS instances which can be included or excluded to run packet capture. If both included and excluded are empty, then the packet capture will run on all instances of AzureVMSS.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureMachineScope" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "storageLocation": { - "description": "The storage location for a packet capture session.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureStorageLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "target": { - "description": "The ID of the targeted resource, only AzureVM and AzureVMSS as target type are currently supported.", - "type": "string" - }, - "targetType": { - "description": "Target type of the resource provided.", - "oneOf": [ - { - "enum": [ - "AzureVM", - "AzureVMSS" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "timeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds.", - "oneOf": [ - { - "maximum": 18000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "totalBytesPerSession": { - "description": "Maximum size of the capture output.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "target", - "storageLocation" - ], - "type": "object" - }, - "PacketCaptureSettings": { - "description": "The storage location for a packet capture session.", - "properties": { - "fileCount": { - "description": "Number of file count. Default value of count is 10 and maximum number is 10000.", - "oneOf": [ - { - "maximum": 10000, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileSizeInBytes": { - "description": "Number of bytes captured per packet. Default value in bytes 104857600 (100MB) and maximum in bytes 4294967295 (4GB).", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sessionTimeLimitInSeconds": { - "description": "Maximum duration of the capture session in seconds is 604800s (7 days) for a file. Default value in second 86400s (1 day).", - "oneOf": [ - { - "maximum": 604800, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PacketCaptureStorageLocation": { - "description": "The storage location for a packet capture session.", - "properties": { - "filePath": { - "description": "This path is invalid if 'Continuous Capture' is provided with 'true' or 'false'. A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures. Required if no storage ID is provided, otherwise optional.", - "type": "string" - }, - "localPath": { - "description": "This path is valid if 'Continuous Capture' is provided with 'true' or 'false' and required if no storage ID is provided, otherwise optional. Must include the name of the capture file (*.cap). For linux virtual machine it must start with /var/captures.", - "type": "string" - }, - "storageId": { - "description": "The ID of the storage account to save the packet capture session. Required if no localPath or filePath is provided.", - "type": "string" - }, - "storagePath": { - "description": "The URI of the storage path to save the packet capture. Must be a well-formed URI describing the location to save the packet capture.", - "type": "string" - } - }, - "type": "object" - }, - "Parameter": { - "description": "Parameters for an Action.", - "properties": { - "asPath": { - "description": "List of AS paths.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "community": { - "description": "List of BGP communities.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routePrefix": { - "description": "List of route prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PartnerManagedResourceProperties": { - "description": "Properties of the partner managed resource.", - "properties": {}, - "type": "object" - }, - "PolicySettings": { - "description": "Defines contents of a web application firewall global configuration.", - "properties": { - "customBlockResponseBody": { - "description": "If the action type is block, customer can override the response body. The body must be specified in base64 encoding.", - "oneOf": [ - { - "maxLength": 32768, - "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customBlockResponseStatusCode": { - "description": "If the action type is block, customer can override the response status code.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadEnforcement": { - "description": "Whether allow WAF to enforce file upload limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fileUploadLimitInMb": { - "description": "Maximum file upload size in Mb for WAF.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "jsChallengeCookieExpirationInMins": { - "description": "Web Application Firewall JavaScript Challenge Cookie Expiration time in minutes.", - "oneOf": [ - { - "maximum": 1440, - "minimum": 5, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "logScrubbing": { - "description": "To scrub sensitive log fields", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettingsLogScrubbing" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "maxRequestBodySizeInKb": { - "description": "Maximum request body size in Kb for WAF.", - "oneOf": [ - { - "minimum": 8, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "mode": { - "description": "The mode of the policy.", - "oneOf": [ - { - "enum": [ - "Prevention", - "Detection" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyCheck": { - "description": "Whether to allow WAF to check request Body.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyEnforcement": { - "description": "Whether allow WAF to enforce request body limits.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestBodyInspectLimitInKB": { - "description": "Max inspection limit in KB for request body inspection for WAF.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "The state of the policy.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PolicySettingsLogScrubbing": { - "description": "To scrub sensitive log fields", - "properties": { - "scrubbingRules": { - "description": "The rules that are applied to the logs for scrubbing.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallScrubbingRules" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "State of the log scrubbing config. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneConfig": { - "description": "PrivateDnsZoneConfig resource.", - "properties": { - "name": { - "description": "Name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZonePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZoneGroupPropertiesFormat": { - "description": "Properties of the private dns zone group.", - "properties": { - "privateDnsZoneConfigs": { - "description": "A collection of private dns zone configurations of the private dns zone group.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateDnsZoneConfig" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateDnsZonePropertiesFormat": { - "description": "Properties of the private dns zone configuration resource.", - "properties": { - "privateDnsZoneId": { - "description": "The resource id of the private dns zone.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointConnectionProperties": { - "description": "Properties of the PrivateEndpointConnectProperties.", - "properties": { - "privateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfiguration": { - "description": "An IP Configuration of the private endpoint.", - "properties": { - "name": { - "description": "The name of the resource that is unique within a resource group.", - "type": "string" - }, - "properties": { - "description": "Properties of private endpoint IP configurations.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateEndpointIPConfigurationProperties": { - "description": "Properties of an IP Configuration of the private endpoint.", - "properties": { - "groupId": { - "description": "The ID of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "memberName": { - "description": "The member name of a group obtained from the remote resource that this private endpoint should connect to.", - "type": "string" - }, - "privateIPAddress": { - "description": "A private ip address obtained from the private endpoint's subnet.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateEndpointProperties": { - "description": "Properties of the private endpoint.", - "properties": { - "applicationSecurityGroups": { - "description": "Application security groups in which the private endpoint IP configuration is included.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customDnsConfigs": { - "description": "An array of custom dns configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/CustomDnsConfigPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customNetworkInterfaceName": { - "description": "The custom name of the network interface attached to the private endpoint.", - "type": "string" - }, - "ipConfigurations": { - "description": "A list of IP configurations of the private endpoint. This will be used to map to the First Party Service's endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateEndpointIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "manualPrivateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource. Used when the network admin does not have access to approve connections to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnections": { - "description": "A grouping of information about the connection to the remote resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The ID of the subnet from which the private IP will be allocated.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkService": { - "description": "Private link service resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the load balancer.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnection": { - "description": "PrivateLinkServiceConnection resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionProperties": { - "description": "Properties of the PrivateLinkServiceConnection.", - "properties": { - "groupIds": { - "description": "The ID(s) of the group(s) obtained from the remote resource that this private endpoint should connect to.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceConnectionState": { - "description": "A collection of read-only information about the state of the connection to the remote resource.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceConnectionState" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceId": { - "description": "The resource id of private link service.", - "type": "string" - }, - "requestMessage": { - "description": "A message passed to the owner of the remote resource with this connection request. Restricted to 140 chars.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceConnectionState": { - "description": "A collection of information about the state of the connection between service consumer and provider.", - "properties": { - "actionsRequired": { - "description": "A message indicating if changes on the service provider require any updates on the consumer.", - "type": "string" - }, - "description": { - "description": "The reason for approval/rejection of the connection.", - "type": "string" - }, - "status": { - "description": "Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.", - "type": "string" - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfiguration": { - "description": "The private link service ip configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of private link service ip configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the private link service ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServiceIpConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceIpConfigurationProperties": { - "description": "Properties of private link service IP configuration.", - "properties": { - "primary": { - "description": "Whether the ip configuration is primary or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAddress": { - "description": "The private IP address of the IP configuration.", - "type": "string" - }, - "privateIPAddressVersion": { - "description": "Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/Subnet" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServiceProperties": { - "description": "Properties of the private link service.", - "properties": { - "autoApproval": { - "description": "The auto-approval list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesAutoApproval" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableProxyProtocol": { - "description": "Whether the private link service is enabled for proxy protocol or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdns": { - "description": "The list of Fqdn.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "An array of private link service IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/PrivateLinkServiceIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "loadBalancerFrontendIpConfigurations": { - "description": "An array of references to the load balancer IP configurations.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "visibility": { - "description": "The visibility list of the private link service.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateLinkServicePropertiesVisibility" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesAutoApproval": { - "description": "The auto-approval list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PrivateLinkServicePropertiesVisibility": { - "description": "The visibility list of the private link service.", - "properties": { - "subscriptions": { - "description": "The list of subscriptions.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Probe": { - "description": "A load balancer probe.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer probe.", - "oneOf": [ - { - "$ref": "#/definitions/ProbePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ProbePropertiesFormat": { - "description": "Load balancer probe resource.", - "properties": { - "intervalInSeconds": { - "description": "The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "numberOfProbes": { - "description": "The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "port": { - "description": "The port for communicating the probe. Possible values range from 1 to 65535, inclusive.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "probeThreshold": { - "description": "The number of consecutive successful or failed probes in order to allow or deny traffic from being delivered to this endpoint. After failing the number of consecutive probes equal to this value, the endpoint will be taken out of rotation and require the same number of successful consecutive probes to be placed back in rotation.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "The protocol of the end point. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' or 'Https' is specified, a 200 OK response from the specifies URI is required for the probe to be successful.", - "oneOf": [ - { - "enum": [ - "Http", - "Tcp", - "Https" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "requestPath": { - "description": "The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.", - "type": "string" - } - }, - "required": [ - "protocol", - "port" - ], - "type": "object" - }, - "PropagatedRouteTable": { - "description": "The list of RouteTables to advertise the routes to.", - "properties": { - "ids": { - "description": "The list of resource ids of all the RouteTables.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "labels": { - "description": "The list of labels.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddress": { - "description": "Public IP address resource.", - "properties": { - "extendedLocation": { - "description": "The extended location of the public ip address.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Public IP address properties.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The public IP address SKU.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressSku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "zones": { - "description": "A list of availability zones denoting the IP allocated for the resource needs to come from.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressDnsSettings": { - "description": "Contains FQDN of the DNS record associated with the public IP address.", - "properties": { - "domainNameLabel": { - "description": "The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.", - "type": "string" - }, - "domainNameLabelScope": { - "description": "The domain name label scope. If a domain name label and a domain name label scope are specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system with a hashed value includes in FQDN.", - "oneOf": [ - { - "enum": [ - "TenantReuse", - "SubscriptionReuse", - "ResourceGroupReuse", - "NoReuse" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.", - "type": "string" - }, - "reverseFqdn": { - "description": "The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.", - "type": "string" - } - }, - "type": "object" - }, - "PublicIPAddressPropertiesFormat": { - "description": "Public IP address properties.", - "properties": { - "ddosSettings": { - "description": "The DDoS protection custom policy associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/DdosSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deleteOption": { - "description": "Specify what happens to the public IP address when the VM using it is deleted", - "oneOf": [ - { - "enum": [ - "Delete", - "Detach" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dnsSettings": { - "description": "The FQDN of the DNS record associated with the public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/PublicIPAddressDnsSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "idleTimeoutInMinutes": { - "description": "The idle timeout of the public IP address.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The IP address associated with the public IP address resource.", - "type": "string" - }, - "ipTags": { - "description": "The list of tags associated with the public IP address.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "linkedPublicIPAddress": { - "description": "The linked public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "migrationPhase": { - "description": "Migration phase of Public IP Address.", - "oneOf": [ - { - "enum": [ - "None", - "Prepare", - "Commit", - "Abort", - "Committed" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "The NatGateway for the Public IP address.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAllocationMethod": { - "description": "The public IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPPrefix": { - "description": "The Public IP Prefix this Public IP Address should be allocated from.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "servicePublicIPAddress": { - "description": "The service public IP address of the public IP address resource.", - "oneOf": [ - { - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPAddressSku": { - "description": "SKU of a public IP address.", - "properties": { - "name": { - "description": "Name of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP address SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixPropertiesFormat": { - "description": "Public IP prefix properties.", - "properties": { - "customIPPrefix": { - "description": "The customIpPrefix that this prefix is associated with.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipTags": { - "description": "The list of tags associated with the public IP prefix.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpTag" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "NatGateway of Public IP Prefix.", - "oneOf": [ - { - "$ref": "#/definitions/NatGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "prefixLength": { - "description": "The Length of the Public IP Prefix.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddressVersion": { - "description": "The public IP address version.", - "oneOf": [ - { - "enum": [ - "IPv4", - "IPv6" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "PublicIPPrefixSku": { - "description": "SKU of a public IP prefix.", - "properties": { - "name": { - "description": "Name of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Standard" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Tier of a public IP prefix SKU.", - "oneOf": [ - { - "enum": [ - "Regional", - "Global" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosDefinition": { - "description": "Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.", - "properties": { - "destinationIpRanges": { - "description": "Destination IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRanges": { - "description": "Destination port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "markings": { - "description": "List of markings to be used in the configuration.", - "oneOf": [ - { - "items": { - "type": "integer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "RNM supported protocol types.", - "oneOf": [ - { - "enum": [ - "DoNotUse", - "Icmp", - "Tcp", - "Udp", - "Gre", - "Esp", - "Ah", - "Vxlan", - "All" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceIpRanges": { - "description": "Source IP ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosIpRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRanges": { - "description": "Sources port ranges.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/QosPortRange" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "QosIpRange": { - "description": "Qos Traffic Profiler IP Range properties.", - "properties": { - "endIP": { - "description": "End IP Address.", - "type": "string" - }, - "startIP": { - "description": "Start IP Address.", - "type": "string" - } - }, - "type": "object" - }, - "QosPortRange": { - "description": "Qos Traffic Profiler Port range properties.", - "properties": { - "end": { - "description": "Qos Port Range end.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "start": { - "description": "Qos Port Range start.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RadiusServer": { - "description": "Radius Server Settings.", - "properties": { - "radiusServerAddress": { - "description": "The address of this radius server.", - "type": "string" - }, - "radiusServerScore": { - "description": "The initial score assigned to this radius server.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The secret used for this radius server.", - "type": "string" - } - }, - "required": [ - "radiusServerAddress" - ], - "type": "object" - }, - "RetentionPolicyParameters": { - "description": "Parameters that define the retention policy for flow log.", - "properties": { - "days": { - "description": "Number of days to retain flow log records.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enabled": { - "description": "Flag to enable/disable retention.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Route": { - "description": "Route resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "RouteFilterPropertiesFormat": { - "description": "Route Filter Resource.", - "properties": { - "rules": { - "description": "Collection of RouteFilterRules contained within a route filter.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteFilterRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRule": { - "description": "Route Filter Rule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteFilterRulePropertiesFormat": { - "description": "Route Filter Rule Resource.", - "properties": { - "access": { - "description": "The access type of the rule.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "communities": { - "description": "The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeFilterRuleType": { - "description": "The rule type of the rule.", - "oneOf": [ - { - "enum": [ - "Community" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "access", - "routeFilterRuleType", - "communities" - ], - "type": "object" - }, - "RouteMapProperties": { - "description": "Properties of RouteMap resource", - "properties": { - "associatedInboundConnections": { - "description": "List of connections which have this RoutMap associated for inbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "associatedOutboundConnections": { - "description": "List of connections which have this RoutMap associated for outbound traffic.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rules": { - "description": "List of RouteMap rules to be applied.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RouteMapRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteMapRule": { - "description": "A RouteMap Rule.", - "properties": { - "actions": { - "description": "List of actions which will be applied on a match.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Action" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchCriteria": { - "description": "List of matching criterion which will be applied to traffic.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Criterion" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the rule.", - "type": "string" - }, - "nextStepIfMatched": { - "description": "Next step after rule is evaluated. Current supported behaviors are 'Continue'(to next rule) and 'Terminate'.", - "oneOf": [ - { - "enum": [ - "Unknown", - "Continue", - "Terminate" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutePropertiesFormat": { - "description": "Route resource.", - "properties": { - "addressPrefix": { - "description": "The destination CIDR to which the route applies.", - "type": "string" - }, - "hasBgpOverride": { - "description": "A value indicating whether this route overrides overlapping BGP routes regardless of LPM.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.", - "type": "string" - }, - "nextHopType": { - "description": "The type of Azure hop the packet should be sent to.", - "oneOf": [ - { - "enum": [ - "VirtualNetworkGateway", - "VnetLocal", - "Internet", - "VirtualAppliance", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "nextHopType" - ], - "type": "object" - }, - "RouteTable": { - "description": "Route table resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the route table.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTablePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RouteTablePropertiesFormat": { - "description": "Route Table resource.", - "properties": { - "disableBgpRoutePropagation": { - "description": "Whether to disable the routes learned by BGP on that route table. True means disable.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "Collection of routes contained within a route table.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Route" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingConfiguration": { - "description": "Routing Configuration indicating the associated and propagated route tables for this connection.", - "properties": { - "associatedRouteTable": { - "description": "The resource id RouteTable associated with this RoutingConfiguration.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "inboundRouteMap": { - "description": "The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "outboundRouteMap": { - "description": "The resource id of theRouteMap associated with this RoutingConfiguration for outbound advertised routes.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "propagatedRouteTables": { - "description": "The list of RouteTables to advertise the routes to.", - "oneOf": [ - { - "$ref": "#/definitions/PropagatedRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vnetRoutes": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/VnetRoute" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingIntentProperties": { - "description": "The properties of a RoutingIntent resource.", - "properties": { - "routingPolicies": { - "description": "List of routing policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RoutingPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "RoutingPolicy": { - "description": "The routing policy object used in a RoutingIntent resource.", - "properties": { - "destinations": { - "description": "List of all destinations which this routing policy is applicable to (for example: Internet, PrivateTraffic).", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The unique name for the routing policy.", - "type": "string" - }, - "nextHop": { - "description": "The next hop resource id on which this routing policy is applicable to.", - "type": "string" - } - }, - "required": [ - "name", - "destinations", - "nextHop" - ], - "type": "object" - }, - "ScopeConnectionProperties": { - "description": "Scope connection.", - "properties": { - "description": { - "description": "A description of the scope connection.", - "type": "string" - }, - "resourceId": { - "description": "Resource ID.", - "type": "string" - }, - "tenantId": { - "description": "Tenant ID.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityAdminConfigurationPropertiesFormat": { - "description": "Defines the security admin configuration properties.", - "properties": { - "applyOnNetworkIntentPolicyBasedServices": { - "description": "Enum list of network intent policy based services.", - "oneOf": [ - { - "items": { - "enum": [ - "None", - "All", - "AllowRulesOnly" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description of the security configuration.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityPartnerProviderPropertiesFormat": { - "description": "Properties of the Security Partner Provider.", - "properties": { - "securityProviderName": { - "description": "The security provider name.", - "oneOf": [ - { - "enum": [ - "ZScaler", - "IBoss", - "Checkpoint" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The virtualHub to which the Security Partner Provider belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SecurityRule": { - "description": "Network security rule.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "SecurityRulePropertiesFormat": { - "description": "Security rule resource.", - "properties": { - "access": { - "description": "The network traffic is allowed or denied.", - "oneOf": [ - { - "enum": [ - "Allow", - "Deny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "destinationAddressPrefix": { - "description": "The destination address prefix. CIDR or destination IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used.", - "type": "string" - }, - "destinationAddressPrefixes": { - "description": "The destination address prefixes. CIDR or destination IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationApplicationSecurityGroups": { - "description": "The application security group specified as destination.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPortRange": { - "description": "The destination port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "destinationPortRanges": { - "description": "The destination port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "direction": { - "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.", - "oneOf": [ - { - "enum": [ - "Inbound", - "Outbound" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "protocol": { - "description": "Network protocol this rule applies to.", - "oneOf": [ - { - "enum": [ - "Tcp", - "Udp", - "Icmp", - "Esp", - "*", - "Ah" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceAddressPrefix": { - "description": "The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from.", - "type": "string" - }, - "sourceAddressPrefixes": { - "description": "The CIDR or source IP ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourceApplicationSecurityGroups": { - "description": "The application security group specified as source.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationSecurityGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sourcePortRange": { - "description": "The source port or range. Integer or range between 0 and 65535. Asterisk '*' can also be used to match all ports.", - "type": "string" - }, - "sourcePortRanges": { - "description": "The source port ranges.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "protocol", - "access", - "priority", - "direction" - ], - "type": "object" - }, - "ServiceDelegationPropertiesFormat": { - "description": "Properties of a service delegation.", - "properties": { - "serviceName": { - "description": "The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicy": { - "description": "Service End point policy resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the service end point policy.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinition": { - "description": "Service Endpoint policy definitions.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the resource.", - "type": "string" - } - }, - "type": "object" - }, - "ServiceEndpointPolicyDefinitionPropertiesFormat": { - "description": "Service Endpoint policy definition resource.", - "properties": { - "description": { - "description": "A description for this rule. Restricted to 140 chars.", - "type": "string" - }, - "service": { - "description": "Service endpoint name.", - "type": "string" - }, - "serviceResources": { - "description": "A list of service resources.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPolicyPropertiesFormat": { - "description": "Service Endpoint Policy resource.", - "properties": { - "contextualServiceEndpointPolicies": { - "description": "A collection of contextual service endpoint policy.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceAlias": { - "description": "The alias indicating if the policy belongs to a service", - "type": "string" - }, - "serviceEndpointPolicyDefinitions": { - "description": "A collection of service endpoint policy definitions of the service endpoint policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicyDefinition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "ServiceEndpointPropertiesFormat": { - "description": "The service endpoint properties.", - "properties": { - "locations": { - "description": "A list of locations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "service": { - "description": "The type of the endpoint service.", - "type": "string" - } - }, - "type": "object" - }, - "SignaturesOverridesProperties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "properties": { - "signatures": { - "description": "Dictionary of ", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "Sku": { - "description": "The sku of this Bastion Host.", - "properties": { - "name": { - "description": "The name of this Bastion Host.", - "oneOf": [ - { - "enum": [ - "Basic", - "Standard", - "Developer" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "StaticMemberProperties": { - "description": "Properties of static member.", - "properties": { - "resourceId": { - "description": "Resource Id.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoute": { - "description": "List of all Static Routes.", - "properties": { - "addressPrefixes": { - "description": "List of all address prefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the StaticRoute that is unique within a VnetRoute.", - "type": "string" - }, - "nextHopIpAddress": { - "description": "The ip address of the next hop.", - "type": "string" - } - }, - "type": "object" - }, - "StaticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnectionConfiguration for static routes on this HubVnetConnection.", - "properties": { - "vnetLocalRouteOverrideCriteria": { - "description": "Parameter determining whether NVA in spoke vnet is bypassed for traffic with destination in spoke.", - "oneOf": [ - { - "enum": [ - "Contains", - "Equal" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SubResource": { - "description": "Reference to another subresource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - } - }, - "type": "object" - }, - "Subnet": { - "description": "Subnet in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "SubnetPropertiesFormat": { - "description": "Properties of the subnet.", - "properties": { - "addressPrefix": { - "description": "The address prefix for the subnet.", - "type": "string" - }, - "addressPrefixes": { - "description": "List of address prefixes for the subnet.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "applicationGatewayIPConfigurations": { - "description": "Application gateway IP configurations of virtual network resource.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ApplicationGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "defaultOutboundAccess": { - "description": "Set this property to false to disable default outbound connectivity for all VMs in the subnet. This property can only be set at the time of subnet creation and cannot be updated for an existing subnet.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "delegations": { - "description": "An array of references to the delegations on the subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Delegation" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this subnet.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natGateway": { - "description": "Nat gateway associated with this subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "networkSecurityGroup": { - "description": "The reference to the NetworkSecurityGroup resource.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkSecurityGroup" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateEndpointNetworkPolicies": { - "description": "Enable or Disable apply network policies on private end point in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled", - "NetworkSecurityGroupEnabled", - "RouteTableEnabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "privateLinkServiceNetworkPolicies": { - "description": "Enable or Disable apply network policies on private link service in the subnet.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The reference to the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpointPolicies": { - "description": "An array of service endpoint policies.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "serviceEndpoints": { - "description": "An array of service endpoints.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/ServiceEndpointPropertiesFormat" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharingScope": { - "description": "Set this property to Tenant to allow sharing subnet with other subscriptions in your AAD tenant. This property can only be set if defaultOutboundAccess is set to false, both properties can only be set if subnet is empty.", - "oneOf": [ - { - "enum": [ - "Tenant", - "DelegatedServices" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "SwapResourceProperties": { - "description": "Swap resource properties", - "properties": { - "slotType": { - "description": "Specifies slot info on a cloud service", - "oneOf": [ - { - "enum": [ - "Production", - "Staging" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficAnalyticsConfigurationProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "enabled": { - "description": "Flag to enable/disable traffic analytics.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "trafficAnalyticsInterval": { - "description": "The interval in minutes which would decide how frequently TA service should do flow analytics.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "workspaceId": { - "description": "The resource guid of the attached workspace.", - "type": "string" - }, - "workspaceRegion": { - "description": "The location of the attached workspace.", - "type": "string" - }, - "workspaceResourceId": { - "description": "Resource Id of the attached workspace.", - "type": "string" - } - }, - "type": "object" - }, - "TrafficAnalyticsProperties": { - "description": "Parameters that define the configuration of traffic analytics.", - "properties": { - "networkWatcherFlowAnalyticsConfiguration": { - "description": "Parameters that define the configuration of traffic analytics.", - "oneOf": [ - { - "$ref": "#/definitions/TrafficAnalyticsConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "TrafficSelectorPolicy": { - "description": "An traffic selector policy for a virtual network gateway connection.", - "properties": { - "localAddressRanges": { - "description": "A collection of local address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressRanges": { - "description": "A collection of remote address spaces in CIDR format.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "localAddressRanges", - "remoteAddressRanges" - ], - "type": "object" - }, - "VirtualApplianceAdditionalNicProperties": { - "description": "Network Virtual Appliance Additional NIC properties.", - "properties": { - "hasPublicIp": { - "description": "Flag (true or false) for Intent for Public Ip on additional nic", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "Name of additional nic", - "type": "string" - } - }, - "type": "object" - }, - "VirtualApplianceIPConfiguration": { - "description": "Represents a single IP configuration.", - "properties": { - "name": { - "description": "Name of the IP configuration.", - "type": "string" - }, - "properties": { - "description": "Represents a single IP configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceIPConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceIPConfigurationProperties": { - "description": "Represents a single IP configuration properties.", - "properties": { - "primary": { - "description": "Whether or not this is primary IP configuration of the NIC.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceNetworkInterfaceConfiguration": { - "description": "Represents a single NIC configuration.", - "properties": { - "properties": { - "description": "Represents a single NIC configuration properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceNetworkInterfaceConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "NIC type. This should be either PublicNic or PrivateNic.", - "oneOf": [ - { - "enum": [ - "PublicNic", - "PrivateNic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceNetworkInterfaceConfigurationProperties": { - "description": "Represents a single NIC configuration properties.", - "properties": { - "ipConfigurations": { - "description": "", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualApplianceIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSiteProperties": { - "description": "Properties of the rule group.", - "properties": { - "addressPrefix": { - "description": "Address Prefix.", - "type": "string" - }, - "o365Policy": { - "description": "Office 365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/Office365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualApplianceSkuProperties": { - "description": "Network Virtual Appliance Sku Properties.", - "properties": { - "bundledScaleUnit": { - "description": "Virtual Appliance Scale Unit.", - "type": "string" - }, - "marketPlaceVersion": { - "description": "Virtual Appliance Version.", - "type": "string" - }, - "vendor": { - "description": "Virtual Appliance Vendor.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubId": { - "description": "Virtual Hub identifier.", - "properties": { - "id": { - "description": "The resource URI for the Virtual Hub where the ExpressRoute gateway is or will be deployed. The Virtual Hub resource and the ExpressRoute gateway resource reside in the same subscription.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubProperties": { - "description": "Parameters for VirtualHub.", - "properties": { - "addressPrefix": { - "description": "Address-prefix for this VirtualHub.", - "type": "string" - }, - "allowBranchToBranchTraffic": { - "description": "Flag to control transit for VirtualRouter hub.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "azureFirewall": { - "description": "The azureFirewall associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGateway": { - "description": "The expressRouteGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hubRoutingPreference": { - "description": "The hubRoutingPreference of this VirtualHub.", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "ASPath" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "p2SVpnGateway": { - "description": "The P2SVpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "preferredRoutingGateway": { - "description": "The preferred gateway to route on-prem traffic", - "oneOf": [ - { - "enum": [ - "ExpressRoute", - "VpnGateway", - "None" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routeTable": { - "description": "The routeTable associated with this virtual hub.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTable" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityPartnerProvider": { - "description": "The securityPartnerProvider associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "securityProviderName": { - "description": "The Security Provider name.", - "type": "string" - }, - "sku": { - "description": "The sku of this VirtualHub.", - "type": "string" - }, - "virtualHubRouteTableV2s": { - "description": "List of all virtual hub route table v2s associated with this VirtualHub.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteTableV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualWan": { - "description": "The VirtualWAN to which the VirtualHub belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGateway": { - "description": "The VpnGateway associated with this VirtualHub.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRoute": { - "description": "VirtualHub route.", - "properties": { - "addressPrefixes": { - "description": "List of all addressPrefixes.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopIpAddress": { - "description": "NextHop ip address.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualHubRouteTable": { - "description": "VirtualHub route table.", - "properties": { - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2": { - "description": "VirtualHubRouteTableV2 Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteTableV2Properties": { - "description": "Parameters for VirtualHubRouteTableV2.", - "properties": { - "attachedConnections": { - "description": "List of all connections attached to this route table v2.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routes": { - "description": "List of all routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualHubRouteV2" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualHubRouteV2": { - "description": "VirtualHubRouteTableV2 route.", - "properties": { - "destinationType": { - "description": "The type of destinations.", - "type": "string" - }, - "destinations": { - "description": "List of all destinations.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "nextHopType": { - "description": "The type of next hops.", - "type": "string" - }, - "nextHops": { - "description": "NextHops ip address.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkBgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "properties": { - "virtualNetworkCommunity": { - "description": "The BGP community associated with the virtual network.", - "type": "string" - } - }, - "required": [ - "virtualNetworkCommunity" - ], - "type": "object" - }, - "VirtualNetworkEncryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "properties": { - "enabled": { - "description": "Indicates if encryption is enabled on the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enforcement": { - "description": "If the encrypted VNet allows VM that does not support encryption", - "oneOf": [ - { - "enum": [ - "DropUnencrypted", - "AllowUnencrypted" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "enabled" - ], - "type": "object" - }, - "VirtualNetworkGateway": { - "description": "A common class for general resource information.", - "properties": { - "extendedLocation": { - "description": "The extended location of type local virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/ExtendedLocation" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VirtualNetworkGatewayAutoScaleBounds": { - "properties": { - "max": { - "description": "Maximum Scale Units for Autoscale configuration", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "min": { - "description": "Minimum scale Units for Autoscale configuration", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayAutoScaleConfiguration": { - "description": "Virtual Network Gateway Autoscale Configuration details", - "properties": { - "bounds": { - "description": "The bounds of the autoscale configuration", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayAutoScaleBounds" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayConnectionPropertiesFormat": { - "description": "VirtualNetworkGatewayConnection properties.", - "properties": { - "authorizationKey": { - "description": "The authorizationKey.", - "type": "string" - }, - "connectionMode": { - "description": "The connection mode for this connection.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionProtocol": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connectionType": { - "description": "Gateway connection type.", - "oneOf": [ - { - "enum": [ - "IPsec", - "Vnet2Vnet", - "ExpressRoute", - "VPNClient" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "The dead peer detection timeout of this connection in seconds.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateLinkFastPath": { - "description": "Bypass the ExpressRoute gateway when accessing private-links. ExpressRoute FastPath (expressRouteGatewayBypass) must be enabled.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "expressRouteGatewayBypass": { - "description": "Bypass ExpressRoute Gateway for data forwarding.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayCustomBgpIpAddresses": { - "description": "GatewayCustomBgpIpAddresses to be used for virtual network gateway Connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localNetworkGateway2": { - "description": "The reference to local network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/LocalNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peer": { - "description": "The reference to peerings resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "The routing weight.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "The IPSec shared key.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use private local Azure IP for the connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway1": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkGateway2": { - "description": "The reference to virtual network gateway resource.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGateway" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "virtualNetworkGateway1", - "connectionType" - ], - "type": "object" - }, - "VirtualNetworkGatewayIPConfiguration": { - "description": "IP configuration for virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network gateway ip configuration.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayIPConfigurationPropertiesFormat": { - "description": "Properties of VirtualNetworkGatewayIPConfiguration.", - "properties": { - "privateIPAllocationMethod": { - "description": "The private IP address allocation method.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "publicIPAddress": { - "description": "The reference to the public IP resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnet": { - "description": "The reference to the subnet resource.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRule": { - "description": "VirtualNetworkGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayNatRuleProperties": { - "description": "Parameters for VirtualNetworkGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroup": { - "description": "Parameters for VirtualNetworkGatewayPolicyGroup.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of tVirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupMember": { - "description": "Vpn Client Connection configuration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VirtualNetworkGatewayPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkGatewayPolicyGroupProperties": { - "description": "Properties of VirtualNetworkGatewayPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VirtualNetworkGatewayPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VirtualNetworkGatewayPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "isDefault", - "priority", - "policyMembers" - ], - "type": "object" - }, - "VirtualNetworkGatewayPropertiesFormat": { - "description": "VirtualNetworkGateway properties.", - "properties": { - "activeActive": { - "description": "ActiveActive flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "adminState": { - "description": "Property to indicate if the Express Route Gateway serves traffic when there are multiple Express Route Gateways in the vnet", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowRemoteVnetTraffic": { - "description": "Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity to Azure Virtual WAN.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualWanTraffic": { - "description": "Configures this gateway to accept traffic from remote Virtual WAN networks.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "autoScaleConfiguration": { - "description": "Autoscale configuration for virutal network gateway", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayAutoScaleConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpSettings": { - "description": "Virtual network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "customRoutes": { - "description": "The reference to the address space resource which represents the custom routes address space specified by the customer for virtual network gateway and VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableIPSecReplayProtection": { - "description": "disableIPSecReplayProtection flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "Whether BGP is enabled for this virtual network gateway or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "EnableBgpRouteTranslationForNat flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDnsForwarding": { - "description": "Whether dns forwarding is enabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enablePrivateIpAddress": { - "description": "Whether private IP needs to be enabled on this gateway for connections or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayDefaultSite": { - "description": "The reference to the LocalNetworkGateway resource which represents local network site having default routes. Assign Null value in case of removing existing default site setting.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "gatewayType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "Vpn", - "ExpressRoute", - "LocalGateway" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurations": { - "description": "IP configurations for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayIPConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "NatRules for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sku": { - "description": "The reference to the VirtualNetworkGatewaySku resource which represents the SKU selected for Virtual network gateway.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewaySku" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vNetExtendedLocationResourceId": { - "description": "Customer vnet resource id. VirtualNetworkGateway of type local gateway is associated with the customer vnet.", - "type": "string" - }, - "virtualNetworkGatewayPolicyGroups": { - "description": "The reference to the VirtualNetworkGatewayPolicyGroup resource which represents the available VirtualNetworkGatewayPolicyGroup for the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkGatewayPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientConfiguration": { - "description": "The reference to the VpnClientConfiguration resource which represents the P2S VpnClient configurations.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayGeneration": { - "description": "The generation for this VirtualNetworkGateway. Must be None if gatewayType is not VPN.", - "oneOf": [ - { - "enum": [ - "None", - "Generation1", - "Generation2" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnType": { - "description": "The type of this virtual network gateway.", - "oneOf": [ - { - "enum": [ - "PolicyBased", - "RouteBased" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkGatewaySku": { - "description": "VirtualNetworkGatewaySku details.", - "properties": { - "name": { - "description": "Gateway SKU name.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ", - "ErGwScale" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tier": { - "description": "Gateway SKU tier.", - "oneOf": [ - { - "enum": [ - "Basic", - "HighPerformance", - "Standard", - "UltraPerformance", - "VpnGw1", - "VpnGw2", - "VpnGw3", - "VpnGw4", - "VpnGw5", - "VpnGw1AZ", - "VpnGw2AZ", - "VpnGw3AZ", - "VpnGw4AZ", - "VpnGw5AZ", - "ErGw1AZ", - "ErGw2AZ", - "ErGw3AZ", - "ErGwScale" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPeering": { - "description": "Peerings in a virtual network resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "Resource type.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualNetworkPeeringPropertiesFormat": { - "description": "Properties of the virtual network peering.", - "properties": { - "allowForwardedTraffic": { - "description": "Whether the forwarded traffic from the VMs in the local virtual network will be allowed/disallowed in remote virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowGatewayTransit": { - "description": "If gateway links can be used in remote virtual networking to link to this virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVirtualNetworkAccess": { - "description": "Whether the VMs in the local virtual network space would be able to access the VMs in remote virtual network space.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "doNotVerifyRemoteGateways": { - "description": "If we need to verify the provisioning state of the remote gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableOnlyIPv6Peering": { - "description": "Whether only Ipv6 address space is peered for subnet peering.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localAddressSpace": { - "description": "The local address space of the local virtual network that is peered.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localSubnetNames": { - "description": "List of local subnet names that are subnet peered with remote virtual network.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "localVirtualNetworkAddressSpace": { - "description": "The current local address space of the local virtual network that is peered.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerCompleteVnets": { - "description": "Whether complete virtual network address space is peered.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringState": { - "description": "The status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "Initiated", - "Connected", - "Disconnected" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peeringSyncLevel": { - "description": "The peering sync status of the virtual network peering.", - "oneOf": [ - { - "enum": [ - "FullyInSync", - "RemoteNotInSync", - "LocalNotInSync", - "LocalAndRemoteNotInSync" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteAddressSpace": { - "description": "The reference to the address space peered with the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteBgpCommunities": { - "description": "The reference to the remote virtual network's Bgp Communities.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteSubnetNames": { - "description": "List of remote subnet names from remote virtual network that are subnet peered.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetwork": { - "description": "The reference to the remote virtual network. The remote virtual network can be in the same or different region (preview). See here to register for the preview and learn more (https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-peering).", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVirtualNetworkAddressSpace": { - "description": "The reference to the current address space of the remote virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useRemoteGateways": { - "description": "If remote gateways can be used on this virtual network. If the flag is set to true, and allowGatewayTransit on remote peering is also true, virtual network will use gateways of remote virtual network for transit. Only one peering can have this flag set to true. This flag cannot be set if virtual network already has a gateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkPropertiesFormat": { - "description": "Properties of the virtual network.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges that can be used by subnets.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpCommunities": { - "description": "Bgp Communities sent over ExpressRoute with each route corresponding to a prefix in this VNET.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkBgpCommunities" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ddosProtectionPlan": { - "description": "The DDoS protection plan associated with the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dhcpOptions": { - "description": "The dhcpOptions that contains an array of DNS servers available to VMs deployed in the virtual network.", - "oneOf": [ - { - "$ref": "#/definitions/DhcpOptions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableDdosProtection": { - "description": "Indicates if DDoS protection is enabled for all the protected resources in the virtual network. It requires a DDoS protection plan associated with the resource.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableVmProtection": { - "description": "Indicates if VM protection is enabled for all the subnets in the virtual network.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "encryption": { - "description": "Indicates if encryption is enabled on virtual network and if VM without encryption is allowed in encrypted VNet.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkEncryption" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "flowTimeoutInMinutes": { - "description": "The FlowTimeout value (in minutes) for the Virtual Network", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAllocations": { - "description": "Array of IpAllocation which reference this VNET.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "subnets": { - "description": "A list of subnets in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/Subnet" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualNetworkPeerings": { - "description": "A list of peerings in a Virtual Network.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VirtualNetworkPeering" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTap": { - "description": "Virtual Network Tap resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "properties": { - "description": "Virtual Network Tap Properties.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkTapPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualNetworkTapPropertiesFormat": { - "description": "Virtual Network Tap properties.", - "properties": { - "destinationLoadBalancerFrontEndIPConfiguration": { - "description": "The reference to the private IP address on the internal Load Balancer that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/FrontendIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationNetworkInterfaceIPConfiguration": { - "description": "The reference to the private IP Address of the collector nic that will receive the tap.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceIPConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "destinationPort": { - "description": "The VXLAN destination port that will receive the tapped traffic.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterAutoScaleConfiguration": { - "description": "The VirtualHub Router autoscale configuration.", - "properties": { - "minCapacity": { - "description": "The minimum number of scale units for VirtualHub Router.", - "oneOf": [ - { - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualRouterPeeringProperties": { - "description": "Properties of the rule group.", - "properties": { - "peerAsn": { - "description": "Peer ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "peerIp": { - "description": "Peer IP.", - "type": "string" - } - }, - "type": "object" - }, - "VirtualRouterPropertiesFormat": { - "description": "Virtual Router definition.", - "properties": { - "hostedGateway": { - "description": "The Gateway on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "hostedSubnet": { - "description": "The Subnet on which VirtualRouter is hosted.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterAsn": { - "description": "VirtualRouter ASN.", - "oneOf": [ - { - "maximum": 4294967295, - "minimum": 0, - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualRouterIps": { - "description": "VirtualRouter IPs.", - "oneOf": [ - { - "items": { - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VirtualWanProperties": { - "description": "Parameters for VirtualWAN.", - "properties": { - "allowBranchToBranchTraffic": { - "description": "True if branch to branch traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "allowVnetToVnetTraffic": { - "description": "True if Vnet to Vnet traffic is allowed.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "disableVpnEncryption": { - "description": "Vpn encryption to be disabled or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of the VirtualWAN.", - "type": "string" - } - }, - "type": "object" - }, - "VnetRoute": { - "description": "List of routes that control routing from VirtualHub into a virtual network connection.", - "properties": { - "staticRoutes": { - "description": "List of all Static Routes.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/StaticRoute" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "staticRoutesConfig": { - "description": "Configuration for static routes on this HubVnetConnection.", - "oneOf": [ - { - "$ref": "#/definitions/StaticRoutesConfig" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfiguration": { - "description": "A vpn client connection configuration for client connection configuration.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VngClientConnectionConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VngClientConnectionConfigurationProperties": { - "description": "Properties of VngClientConnectionConfiguration.", - "properties": { - "virtualNetworkGatewayPolicyGroups": { - "description": "List of references to virtualNetworkGatewayPolicyGroups", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "vpnClientAddressPool", - "virtualNetworkGatewayPolicyGroups" - ], - "type": "object" - }, - "VpnClientConfiguration": { - "description": "VpnClientConfiguration for P2S client.", - "properties": { - "aadAudience": { - "description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadIssuer": { - "description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "aadTenant": { - "description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication.", - "type": "string" - }, - "radiusServerAddress": { - "description": "The radius server address property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServerSecret": { - "description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection.", - "type": "string" - }, - "radiusServers": { - "description": "The radiusServers property for multiple radius server configuration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vngClientConnectionConfigurations": { - "description": "per ip address pool connection policy for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VngClientConnectionConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the virtual network gateway..", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientAddressPool": { - "description": "The reference to the address space resource which represents Address space for P2S VpnClient.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for virtual network gateway P2S client.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientProtocols": { - "description": "VpnClientProtocols for Virtual network gateway.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "SSTP", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VpnClientRevokedCertificate for Virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VpnClientRootCertificate for virtual network gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificate": { - "description": "VPN client revoked certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client revoked certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRevokedCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnClientRevokedCertificatePropertiesFormat": { - "description": "Properties of the revoked VPN client certificate of virtual network gateway.", - "properties": { - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnClientRootCertificate": { - "description": "VPN client root certificate of virtual network gateway.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the vpn client root certificate.", - "oneOf": [ - { - "$ref": "#/definitions/VpnClientRootCertificatePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "properties" - ], - "type": "object" - }, - "VpnClientRootCertificatePropertiesFormat": { - "description": "Properties of SSL certificates of application gateway.", - "properties": { - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "required": [ - "publicCertData" - ], - "type": "object" - }, - "VpnConnection": { - "description": "VpnConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "DPD timeout in seconds for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableInternetSecurity": { - "description": "Enable internet security.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "remoteVpnSite": { - "description": "Id of the connected vpn site.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingConfiguration": { - "description": "The Routing Configuration indicating the associated and propagated route tables on this connection.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingConfiguration" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "trafficSelectorPolicies": { - "description": "The Traffic Selector Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/TrafficSelectorPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnections": { - "description": "List of all vpn site link connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLinkConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRule": { - "description": "VpnGatewayNatRule Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayNatRuleProperties": { - "description": "Parameters for VpnGatewayNatRule.", - "properties": { - "externalMappings": { - "description": "The private IP address external mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "internalMappings": { - "description": "The private IP address internal mapping for NAT.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnNatRuleMapping" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipConfigurationId": { - "description": "The IP Configuration ID this NAT rule applies to.", - "type": "string" - }, - "mode": { - "description": "The Source NAT direction of a VPN NAT.", - "oneOf": [ - { - "enum": [ - "EgressSnat", - "IngressSnat" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "description": "The type of NAT rule for VPN NAT.", - "oneOf": [ - { - "enum": [ - "Static", - "Dynamic" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnGatewayProperties": { - "description": "Parameters for VpnGateway.", - "properties": { - "bgpSettings": { - "description": "Local network gateway's BGP speaker settings.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "connections": { - "description": "List of all vpn connections to the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnConnection" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgpRouteTranslationForNat": { - "description": "Enable BGP routes translation for NAT on this VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "isRoutingPreferenceInternet": { - "description": "Enable Routing Preference property for the Public IP Interface of the VpnGateway.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "natRules": { - "description": "List of all the nat Rules associated with the gateway.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnGatewayNatRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "virtualHub": { - "description": "The VirtualHub to which the gateway belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayScaleUnit": { - "description": "The scale unit for this vpn gateway.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnLinkBgpSettings": { - "description": "BGP settings details for a link.", - "properties": { - "asn": { - "description": "The BGP speaker's ASN.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpPeeringAddress": { - "description": "The BGP peering address and BGP identifier of this BGP speaker.", - "type": "string" - } - }, - "type": "object" - }, - "VpnLinkProviderProperties": { - "description": "List of properties of a link provider.", - "properties": { - "linkProviderName": { - "description": "Name of the link provider.", - "type": "string" - }, - "linkSpeedInMbps": { - "description": "Link speed.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnNatRuleMapping": { - "description": "Vpn NatRule mapping.", - "properties": { - "addressSpace": { - "description": "Address space for Vpn NatRule mapping.", - "type": "string" - }, - "portRange": { - "description": "Port range for Vpn NatRule mapping.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusClientRootCertificate": { - "description": "Properties of the Radius client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The Radius client root certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigRadiusServerRootCertificate": { - "description": "Properties of Radius Server root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRevokedCertificate": { - "description": "Properties of the revoked VPN client certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "thumbprint": { - "description": "The revoked VPN client certificate thumbprint.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigVpnClientRootCertificate": { - "description": "Properties of VPN client root certificate of VpnServerConfiguration.", - "properties": { - "name": { - "description": "The certificate name.", - "type": "string" - }, - "publicCertData": { - "description": "The certificate public data.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroup": { - "description": "VpnServerConfigurationPolicyGroup Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupMember": { - "description": "VpnServerConfiguration PolicyGroup member", - "properties": { - "attributeType": { - "description": "The Vpn Policy member attribute type.", - "oneOf": [ - { - "enum": [ - "CertificateGroupId", - "AADGroupId", - "RadiusAzureGroupId" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "attributeValue": { - "description": "The value of Attribute used for this VpnServerConfigurationPolicyGroupMember.", - "type": "string" - }, - "name": { - "description": "Name of the VpnServerConfigurationPolicyGroupMember.", - "type": "string" - } - }, - "type": "object" - }, - "VpnServerConfigurationPolicyGroupProperties": { - "description": "Parameters for VpnServerConfigurationPolicyGroup.", - "properties": { - "isDefault": { - "description": "Shows if this is a Default VpnServerConfigurationPolicyGroup or not.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policyMembers": { - "description": "Multiple PolicyMembers for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupMember" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "priority": { - "description": "Priority for VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnServerConfigurationProperties": { - "description": "Parameters for VpnServerConfiguration.", - "properties": { - "aadAuthenticationParameters": { - "description": "The set of aad vpn authentication parameters.", - "oneOf": [ - { - "$ref": "#/definitions/AadAuthenticationParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "configurationPolicyGroups": { - "description": "List of all VpnServerConfigurationPolicyGroups.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroup" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the VpnServerConfiguration that is unique within a resource group.", - "type": "string" - }, - "radiusClientRootCertificates": { - "description": "Radius client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerAddress": { - "description": "The radius server address property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServerRootCertificates": { - "description": "Radius Server root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigRadiusServerRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "radiusServerSecret": { - "description": "The radius secret property of the VpnServerConfiguration resource for point to site client connection.", - "type": "string" - }, - "radiusServers": { - "description": "Multiple Radius Server configuration for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/RadiusServer" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnAuthenticationTypes": { - "description": "VPN authentication types for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "Certificate", - "Radius", - "AAD" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientIpsecPolicies": { - "description": "VpnClientIpsecPolicies for VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRevokedCertificates": { - "description": "VPN client revoked certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRevokedCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnClientRootCertificates": { - "description": "VPN client root certificate of VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnServerConfigVpnClientRootCertificate" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnProtocols": { - "description": "VPN protocols for the VpnServerConfiguration.", - "oneOf": [ - { - "items": { - "enum": [ - "IkeV2", - "OpenVPN" - ], - "type": "string" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLink": { - "description": "VpnSiteLink Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnection": { - "description": "VpnSiteLinkConnection Resource.", - "properties": { - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN site link connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnSiteLinkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkConnectionProperties": { - "description": "Parameters for VpnConnection.", - "properties": { - "connectionBandwidth": { - "description": "Expected bandwidth in MBPS.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "dpdTimeoutSeconds": { - "description": "Dead Peer Detection timeout in seconds for VpnLink connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "egressNatRules": { - "description": "List of egress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableBgp": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "enableRateLimiting": { - "description": "EnableBgp flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ingressNatRules": { - "description": "List of ingress NatRules.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/SubResource" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipsecPolicies": { - "description": "The IPSec Policies to be considered by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/IpsecPolicy" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "routingWeight": { - "description": "Routing weight for vpn connection.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "sharedKey": { - "description": "SharedKey for the vpn connection.", - "type": "string" - }, - "useLocalAzureIpAddress": { - "description": "Use local azure ip to initiate connection.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "usePolicyBasedTrafficSelectors": { - "description": "Enable policy-based traffic selectors.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnConnectionProtocolType": { - "description": "Connection protocol used for this connection.", - "oneOf": [ - { - "enum": [ - "IKEv2", - "IKEv1" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnGatewayCustomBgpAddresses": { - "description": "vpnGatewayCustomBgpAddresses used by this connection.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GatewayCustomBgpIpAddressIpConfiguration" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnLinkConnectionMode": { - "description": "Vpn link connection mode.", - "oneOf": [ - { - "enum": [ - "Default", - "ResponderOnly", - "InitiatorOnly" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLink": { - "description": "Id of the connected vpn site link.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteLinkProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkBgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "fqdn": { - "description": "FQDN of vpn-site-link.", - "type": "string" - }, - "ipAddress": { - "description": "The ip-address for the vpn-site-link.", - "type": "string" - }, - "linkProperties": { - "description": "The link provider properties.", - "oneOf": [ - { - "$ref": "#/definitions/VpnLinkProviderProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "VpnSiteProperties": { - "description": "Parameters for VpnSite.", - "properties": { - "addressSpace": { - "description": "The AddressSpace that contains an array of IP address ranges.", - "oneOf": [ - { - "$ref": "#/definitions/AddressSpace" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "bgpProperties": { - "description": "The set of bgp properties.", - "oneOf": [ - { - "$ref": "#/definitions/BgpSettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "deviceProperties": { - "description": "The device properties.", - "oneOf": [ - { - "$ref": "#/definitions/DeviceProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ipAddress": { - "description": "The ip-address for the vpn-site.", - "type": "string" - }, - "isSecuritySite": { - "description": "IsSecuritySite flag.", - "oneOf": [ - { - "type": "boolean" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "o365Policy": { - "description": "Office365 Policy.", - "oneOf": [ - { - "$ref": "#/definitions/O365PolicyProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "siteKey": { - "description": "The key for vpn-site that can be used for connections.", - "type": "string" - }, - "virtualWan": { - "description": "The VirtualWAN to which the vpnSite belongs.", - "oneOf": [ - { - "$ref": "#/definitions/SubResource" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "vpnSiteLinks": { - "description": "List of all vpn site links.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/VpnSiteLink" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "type": "object" - }, - "WebApplicationFirewallCustomRule": { - "description": "Defines contents of a web application rule.", - "properties": { - "action": { - "description": "Type of Actions.", - "oneOf": [ - { - "enum": [ - "Allow", - "Block", - "Log", - "JSChallenge" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "groupByUserSession": { - "description": "List of user session identifier group by clauses.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/GroupByUserSession" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "matchConditions": { - "description": "List of match conditions.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/MatchCondition" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "name": { - "description": "The name of the resource that is unique within a policy. This name can be used to access the resource.", - "maxLength": 128, - "type": "string" - }, - "priority": { - "description": "Priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitDuration": { - "description": "Duration over which Rate Limit policy will be applied. Applies only when ruleType is RateLimitRule.", - "oneOf": [ - { - "enum": [ - "OneMin", - "FiveMins" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "rateLimitThreshold": { - "description": "Rate Limit threshold to apply in case ruleType is RateLimitRule. Must be greater than or equal to 1", - "oneOf": [ - { - "type": "integer" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "ruleType": { - "description": "The rule type.", - "oneOf": [ - { - "enum": [ - "MatchRule", - "RateLimitRule", - "Invalid" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.", - "oneOf": [ - { - "enum": [ - "Disabled", - "Enabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "priority", - "ruleType", - "matchConditions", - "action" - ], - "type": "object" - }, - "WebApplicationFirewallPolicyPropertiesFormat": { - "description": "Defines web application firewall policy properties.", - "properties": { - "customRules": { - "description": "The custom rules inside the policy.", - "oneOf": [ - { - "items": { - "$ref": "#/definitions/WebApplicationFirewallCustomRule" - }, - "type": "array" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "managedRules": { - "description": "Describes the managedRules structure.", - "oneOf": [ - { - "$ref": "#/definitions/ManagedRulesDefinition" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "policySettings": { - "description": "The PolicySettings for policy.", - "oneOf": [ - { - "$ref": "#/definitions/PolicySettings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "managedRules" - ], - "type": "object" - }, - "WebApplicationFirewallScrubbingRules": { - "description": "Allow certain variables to be scrubbed on WAF logs", - "properties": { - "matchVariable": { - "description": "The variable to be scrubbed from the logs.", - "oneOf": [ - { - "enum": [ - "RequestHeaderNames", - "RequestCookieNames", - "RequestArgNames", - "RequestPostArgNames", - "RequestJSONArgNames", - "RequestIPAddress" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "selector": { - "description": "When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.", - "type": "string" - }, - "selectorMatchOperator": { - "description": "When matchVariable is a collection, operate on the selector to specify which elements in the collection this rule applies to.", - "oneOf": [ - { - "enum": [ - "Equals", - "EqualsAny" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "state": { - "description": "Defines the state of log scrubbing rule. Default value is Enabled.", - "oneOf": [ - { - "enum": [ - "Enabled", - "Disabled" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - } - }, - "required": [ - "matchVariable", - "selectorMatchOperator" - ], - "type": "object" - }, - "applicationGateways_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/applicationGateways/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the application gateway private endpoint connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the application gateway private endpoint connection.", - "oneOf": [ - { - "$ref": "#/definitions/ApplicationGatewayPrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_authorizations_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit authorization.", - "oneOf": [ - { - "$ref": "#/definitions/AuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCircuits_peerings_connections_childResource": { - "description": "Microsoft.Network/expressRouteCircuits/peerings/connections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the express route circuit connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route circuit connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCircuitConnectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteCrossConnections_peerings_childResource": { - "description": "Microsoft.Network/expressRouteCrossConnections/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route cross connection peering.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteCrossConnectionPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRouteGateways_expressRouteConnections_childResource": { - "description": "Microsoft.Network/expressRouteGateways/expressRouteConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection subresource.", - "type": "string" - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRouteConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "expressRouteConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "expressRoutePorts_authorizations_childResource": { - "description": "Microsoft.Network/expressRoutePorts/authorizations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the authorization.", - "type": "string" - }, - "properties": { - "description": "ExpressRoutePort properties.", - "oneOf": [ - { - "$ref": "#/definitions/ExpressRoutePortAuthorizationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "authorizations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_firewallPolicyDrafts_childResource": { - "description": "Microsoft.Network/firewallPolicies/firewallPolicyDrafts", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Properties of the firewall policy.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyDraftProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "firewallPolicyDrafts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the FirewallPolicyRuleCollectionGroup.", - "type": "string" - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_ruleCollectionGroups_ruleCollectionGroupDrafts_childResource": { - "description": "Microsoft.Network/firewallPolicies/ruleCollectionGroups/ruleCollectionGroupDrafts", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "The properties of the firewall policy rule collection group.", - "oneOf": [ - { - "$ref": "#/definitions/FirewallPolicyRuleCollectionGroupDraftProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollectionGroupDrafts" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "firewallPolicies_signatureOverrides_childResource": { - "description": "Microsoft.Network/firewallPolicies/signatureOverrides", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Will contain the resource id of the signature override resource", - "type": "string" - }, - "name": { - "oneOf": [ - { - "enum": [ - "default" - ], - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Will contain the properties of the resource (the actual signature overrides)", - "oneOf": [ - { - "$ref": "#/definitions/SignaturesOverridesProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "signatureOverrides" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_backendAddressPools_childResource": { - "description": "Microsoft.Network/loadBalancers/backendAddressPools", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the backend address pool.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer backend address pool.", - "oneOf": [ - { - "$ref": "#/definitions/BackendAddressPoolPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "backendAddressPools" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "loadBalancers_inboundNatRules_childResource": { - "description": "Microsoft.Network/loadBalancers/inboundNatRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the inbound NAT rule.", - "type": "string" - }, - "properties": { - "description": "Properties of load balancer inbound NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/InboundNatRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundNatRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkInterfaces_tapConfigurations_childResource": { - "description": "Microsoft.Network/networkInterfaces/tapConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the tap configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Tap configuration.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkInterfaceTapConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "tapConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_connectivityConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/connectivityConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager connectivity configuration.", - "type": "string" - }, - "properties": { - "description": "Properties of a network manager connectivity configuration", - "oneOf": [ - { - "$ref": "#/definitions/ConnectivityConfigurationProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectivityConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network group.", - "type": "string" - }, - "properties": { - "description": "The Network Group properties", - "oneOf": [ - { - "$ref": "#/definitions/NetworkGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_networkGroups_staticMembers_childResource": { - "description": "Microsoft.Network/networkManagers/networkGroups/staticMembers", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the static member.", - "type": "string" - }, - "properties": { - "description": "The Static Member properties", - "oneOf": [ - { - "$ref": "#/definitions/StaticMemberProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "staticMembers" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_scopeConnections_childResource": { - "description": "Microsoft.Network/networkManagers/scopeConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "Name for the cross-tenant connection.", - "type": "string" - }, - "properties": { - "description": "The scope connection properties", - "oneOf": [ - { - "$ref": "#/definitions/ScopeConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "scopeConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager Security Configuration.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager security admin configuration.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityAdminConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityAdminConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the network manager security Configuration rule collection.", - "type": "string" - }, - "properties": { - "description": "Indicates the properties for the network manager admin rule collection.", - "oneOf": [ - { - "$ref": "#/definitions/AdminRuleCollectionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ruleCollections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkManagers_securityAdminConfigurations_ruleCollections_rules_childResource": { - "description": "Microsoft.Network/networkManagers/securityAdminConfigurations/ruleCollections/rules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the rule.", - "type": "string" - }, - "type": { - "enum": [ - "rules" - ], - "type": "string" - } - }, - "required": [ - "name", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkSecurityGroups_securityRules_childResource": { - "description": "Microsoft.Network/networkSecurityGroups/securityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the security rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the security rule.", - "oneOf": [ - { - "$ref": "#/definitions/SecurityRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "securityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_inboundSecurityRules_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/inboundSecurityRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of security rule collection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Inbound Security Rules.", - "oneOf": [ - { - "$ref": "#/definitions/InboundSecurityRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "inboundSecurityRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_networkVirtualApplianceConnections_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/networkVirtualApplianceConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the NVA connection.", - "oneOf": [ - { - "pattern": "^[A-Za-z0-9_]+", - "type": "string" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "properties": { - "description": "Properties of the express route connection.", - "oneOf": [ - { - "$ref": "#/definitions/NetworkVirtualApplianceConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "networkVirtualApplianceConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkVirtualAppliances_virtualApplianceSites_childResource": { - "description": "Microsoft.Network/networkVirtualAppliances/virtualApplianceSites", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the site.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Appliance Sites.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualApplianceSiteProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualApplianceSites" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_connectionMonitors_childResource": { - "description": "Microsoft.Network/networkWatchers/connectionMonitors", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "location": { - "description": "Connection monitor location.", - "type": "string" - }, - "name": { - "description": "The name of the connection monitor.", - "type": "string" - }, - "properties": { - "description": "Properties of the connection monitor.", - "oneOf": [ - { - "$ref": "#/definitions/ConnectionMonitorParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Connection monitor tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "connectionMonitors" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_flowLogs_childResource": { - "description": "Microsoft.Network/networkWatchers/flowLogs", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "identity": { - "description": "FlowLog resource Managed Identity", - "oneOf": [ - { - "$ref": "#/definitions/ManagedServiceIdentity" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the flow log.", - "type": "string" - }, - "properties": { - "description": "Properties of the flow log.", - "oneOf": [ - { - "$ref": "#/definitions/FlowLogPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "tags": { - "description": "Resource tags.", - "oneOf": [ - { - "additionalProperties": { - "type": "string" - }, - "properties": {}, - "type": "object" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "flowLogs" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "networkWatchers_packetCaptures_childResource": { - "description": "Microsoft.Network/networkWatchers/packetCaptures", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "name": { - "description": "The name of the packet capture session.", - "type": "string" - }, - "properties": { - "description": "Properties of the packet capture.", - "oneOf": [ - { - "$ref": "#/definitions/PacketCaptureParameters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "packetCaptures" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateEndpoints_privateDnsZoneGroups_childResource": { - "description": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private dns zone group.", - "type": "string" - }, - "properties": { - "description": "Properties of the private dns zone group.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateDnsZoneGroupPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateDnsZoneGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "privateLinkServices_privateEndpointConnections_childResource": { - "description": "Microsoft.Network/privateLinkServices/privateEndpointConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the private end point connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the private end point connection.", - "oneOf": [ - { - "$ref": "#/definitions/PrivateEndpointConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "privateEndpointConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeFilters_routeFilterRules_childResource": { - "description": "Microsoft.Network/routeFilters/routeFilterRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "location": { - "description": "Resource location.", - "type": "string" - }, - "name": { - "description": "The name of the route filter rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the route filter rule.", - "oneOf": [ - { - "$ref": "#/definitions/RouteFilterRulePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeFilterRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "routeTables_routes_childResource": { - "description": "Microsoft.Network/routeTables/routes", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the route.", - "type": "string" - }, - "properties": { - "description": "Properties of the route.", - "oneOf": [ - { - "$ref": "#/definitions/RoutePropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routes" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "serviceEndpointPolicies_serviceEndpointPolicyDefinitions_childResource": { - "description": "Microsoft.Network/serviceEndpointPolicies/serviceEndpointPolicyDefinitions", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the service endpoint policy definition name.", - "type": "string" - }, - "properties": { - "description": "Properties of the service endpoint policy definition.", - "oneOf": [ - { - "$ref": "#/definitions/ServiceEndpointPolicyDefinitionPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "serviceEndpointPolicyDefinitions" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_bgpConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/bgpConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "The properties of the Bgp connections.", - "oneOf": [ - { - "$ref": "#/definitions/BgpConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "bgpConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubRouteTables_childResource": { - "description": "Microsoft.Network/virtualHubs/hubRouteTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteTable.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteTable resource.", - "oneOf": [ - { - "$ref": "#/definitions/HubRouteTableProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubRouteTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_hubVirtualNetworkConnections_childResource": { - "description": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the HubVirtualNetworkConnection.", - "type": "string" - }, - "properties": { - "description": "Properties of the hub virtual network connection.", - "oneOf": [ - { - "$ref": "#/definitions/HubVirtualNetworkConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "hubVirtualNetworkConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_ipConfigurations_childResource": { - "description": "Microsoft.Network/virtualHubs/ipConfigurations", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ipconfig.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Hub IPConfigurations.", - "oneOf": [ - { - "$ref": "#/definitions/HubIPConfigurationPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "ipConfigurations" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeMaps_childResource": { - "description": "Microsoft.Network/virtualHubs/routeMaps", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the RouteMap.", - "type": "string" - }, - "properties": { - "description": "Properties of the RouteMap resource.", - "oneOf": [ - { - "$ref": "#/definitions/RouteMapProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeMaps" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routeTables_childResource": { - "description": "Microsoft.Network/virtualHubs/routeTables", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the VirtualHubRouteTableV2.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual hub route table v2.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualHubRouteTableV2Properties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routeTables" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualHubs_routingIntent_childResource": { - "description": "Microsoft.Network/virtualHubs/routingIntent", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the per VirtualHub singleton Routing Intent resource.", - "type": "string" - }, - "properties": { - "description": "Properties of the RoutingIntent resource.", - "oneOf": [ - { - "$ref": "#/definitions/RoutingIntentProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "routingIntent" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworkGateways_natRules_childResource": { - "description": "Microsoft.Network/virtualNetworkGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the Virtual Network Gateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_subnets_childResource": { - "description": "Microsoft.Network/virtualNetworks/subnets", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the subnet.", - "type": "string" - }, - "properties": { - "description": "Properties of the subnet.", - "oneOf": [ - { - "$ref": "#/definitions/SubnetPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "subnets" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualNetworks_virtualNetworkPeerings_childResource": { - "description": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the peering.", - "type": "string" - }, - "properties": { - "description": "Properties of the virtual network peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualNetworkPeeringPropertiesFormat" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "virtualNetworkPeerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "virtualRouters_peerings_childResource": { - "description": "Microsoft.Network/virtualRouters/peerings", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the Virtual Router Peering.", - "type": "string" - }, - "properties": { - "description": "The properties of the Virtual Router Peering.", - "oneOf": [ - { - "$ref": "#/definitions/VirtualRouterPeeringProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "peerings" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_natRules_childResource": { - "description": "Microsoft.Network/vpnGateways/natRules", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the nat rule.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnGateway NAT rule.", - "oneOf": [ - { - "$ref": "#/definitions/VpnGatewayNatRuleProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "natRules" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnGateways_vpnConnections_childResource": { - "description": "Microsoft.Network/vpnGateways/vpnConnections", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the connection.", - "type": "string" - }, - "properties": { - "description": "Properties of the VPN connection.", - "oneOf": [ - { - "$ref": "#/definitions/VpnConnectionProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "vpnConnections" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - }, - "vpnServerConfigurations_configurationPolicyGroups_childResource": { - "description": "Microsoft.Network/vpnServerConfigurations/configurationPolicyGroups", - "properties": { - "apiVersion": { - "enum": [ - "2023-11-01" - ], - "type": "string" - }, - "id": { - "description": "Resource ID.", - "type": "string" - }, - "name": { - "description": "The name of the ConfigurationPolicyGroup.", - "type": "string" - }, - "properties": { - "description": "Properties of the VpnServerConfigurationPolicyGroup.", - "oneOf": [ - { - "$ref": "#/definitions/VpnServerConfigurationPolicyGroupProperties" - }, - { - "$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression" - } - ] - }, - "type": { - "enum": [ - "configurationPolicyGroups" - ], - "type": "string" - } - }, - "required": [ - "name", - "properties", - "apiVersion", - "type" - ], - "type": "object" - } - } -} \ No newline at end of file diff --git a/schemas/common/autogeneratedResources.json b/schemas/common/autogeneratedResources.json index f7baeacd9f..f028ae684d 100644 --- a/schemas/common/autogeneratedResources.json +++ b/schemas/common/autogeneratedResources.json @@ -24145,8649 +24145,6 @@ { "$ref": "https://schema.management.azure.com/schemas/2024-02-01/Microsoft.Network.FrontDoor.json#/resourceDefinitions/FrontDoorWebApplicationFirewallPolicies" }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/virtualnetworkgateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/virtualnetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/virtualnetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2015-06-15/Microsoft.Network.NRP.json#/resourceDefinitions/virtualnetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2016-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-03-30/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2017-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/interfaceEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans_p2sVpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/interfaceEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans_p2sVpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-10-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/interfaceEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans_p2sVpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/interfaceEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans_p2sVpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2018-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/interfaceEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans_p2sVpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans_p2sVpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans_p2sVpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans_p2sVpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2019-12-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2020-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_links" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_profiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_profiles_accessRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_resourceAssociations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-03-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-05-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2021-08-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-01-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-02-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-04-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityUserConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeMaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeMaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-07-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeMaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeMaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2022-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeMaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-02-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-03-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_routingConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-03-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_routingConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-03-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_routingConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeMaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-04-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeMaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-05-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_networkVirtualApplianceConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeMaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-06-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-07-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-07-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_links" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-07-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_profiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-07-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_profiles_accessRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-07-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_resourceAssociations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-08-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-08-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_links" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-08-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_profiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-08-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_profiles_accessRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-08-01-preview/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityPerimeters_resourceAssociations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_networkVirtualApplianceConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeMaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-09-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationGateways_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ApplicationGatewayWebApplicationFirewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/applicationSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/azureFirewalls" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/bastionHosts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/customIpPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosCustomPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ddosProtectionPlans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/dscpConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCircuits_peerings_connections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteCrossConnections_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRouteGateways_expressRouteConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ExpressRoutePorts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/expressRoutePorts_authorizations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_firewallPolicyDrafts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_ruleCollectionGroups_ruleCollectionGroupDrafts" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/firewallPolicies_signatureOverrides" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/IpAllocations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/ipGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_backendAddressPools" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/loadBalancers_inboundNatRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/localNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/natGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkInterfaces_tapConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_connectivityConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_networkGroups_staticMembers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_scopeConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkManagers_securityAdminConfigurations_ruleCollections_rules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkProfiles" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkSecurityGroups_securityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_inboundSecurityRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_networkVirtualApplianceConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkVirtualAppliances_virtualApplianceSites" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_connectionMonitors" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_flowLogs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/networkWatchers_packetCaptures" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/p2svpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateEndpoints_privateDnsZoneGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/privateLinkServices_privateEndpointConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPAddresses" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/publicIPPrefixes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeFilters_routeFilterRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/routeTables_routes" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/securityPartnerProviders" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/serviceEndpointPolicies_serviceEndpointPolicyDefinitions" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_bgpConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubRouteTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_hubVirtualNetworkConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_ipConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeMaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routeTables" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualHubs_routingIntent" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_subnets" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworks_virtualNetworkPeerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualNetworkTaps" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualRouters_peerings" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/virtualWans" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_natRules" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnGateways_vpnConnections" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnServerConfigurations_configurationPolicyGroups" - }, - { - "$ref": "https://schema.management.azure.com/schemas/2023-11-01/Microsoft.Network.NRP.json#/resourceDefinitions/vpnSites" - }, { "$ref": "https://schema.management.azure.com/schemas/2018-09-01/Microsoft.Network.privateDns.json#/resourceDefinitions/privateDnsZones" },